Vendor

The Foreman Project

11 known vulnerabilities.

Products

foreman 8 katello 1 foreman-tasks 1 foreman katello plugin 1

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.0

CVE-2025-10622

Foreman: os command injection via ct_location and fcct_location parameters

A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of comm…

Red Hat The Foreman Project Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8

Nov 5, 2025
High 7.4

CVE-2014-8183

It was found that foreman, versions 1.x.x before 1.15.6, in Satellite 6 did not properly enforce access controls on cer…

The Foreman Project foreman

Aug 1, 2019
High 7.6

CVE-2018-16861

A cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker with privilege to create…

The Foreman Project foreman

Dec 7, 2018