Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
theforeman foreman vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2014-3531
Multiple cross-site scripting (XSS) vulnerabilities in Foreman prior to 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) description.
Theforeman Foreman
5.4
CVSSv3
CVE-2014-0208
Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman prior to 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key name.
Theforeman Foreman
8.1
CVSSv3
CVE-2015-5246
The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain access via vectors involving the password lifetime period in Active Directory.
Theforeman Foreman 1.9.0
6.1
CVSSv3
CVE-2015-5282
Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.
Theforeman Foreman 1.8.4
Theforeman Foreman 1.14.2
Theforeman Foreman 1.13.3
Theforeman Foreman 1.12.0
Theforeman Foreman 1.12.3
Theforeman Foreman 1.11.3
Theforeman Foreman 1.13.4
Theforeman Foreman 1.10.3
Theforeman Foreman 1.9.0
Theforeman Foreman 1.9.1
Theforeman Foreman 1.12.2
Theforeman Foreman 1.9.3
Theforeman Foreman 1.8.0
Theforeman Foreman 1.11.4
Theforeman Foreman 1.10.1
Theforeman Foreman 1.11.0
Theforeman Foreman 1.15.0
Theforeman Foreman 1.7.4
Theforeman Foreman 1.7.5
Theforeman Foreman 1.8.1
Theforeman Foreman 1.13.0
Theforeman Foreman 1.7.0
8.1
CVSSv3
CVE-2015-5152
Foreman after 1.1 and prior to 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to true, which allows remote malicious users to obtain user credentials via a man-in-the-middle attack.
Theforeman Foreman 1.4.1
Theforeman Foreman 1.3.0
Theforeman Foreman 1.4.3
Theforeman Foreman 1.2.2
Theforeman Foreman 1.4.0
Theforeman Foreman 1.2.1
Theforeman Foreman 1.8.0
Theforeman Foreman 1.7.4
Theforeman Foreman 1.7.5
Theforeman Foreman 1.7.0
Theforeman Foreman 1.4.2
Theforeman Foreman 1.8.1
Theforeman Foreman 1.5.0
Theforeman Foreman 1.2.0
Theforeman Foreman 1.5.2
Theforeman Foreman 1.5.3
Theforeman Foreman 1.2.3
Theforeman Foreman 1.1-1
Theforeman Foreman 1.6.0
Theforeman Foreman 1.8.3
Theforeman Foreman 1.7.1
Theforeman Foreman 1.5.1
8.8
CVSSv3
CVE-2017-7505
Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted by these permissions on all administrator user object outside of their scope, such...
Theforeman Foreman 1.8.4
Theforeman Foreman 1.14.2
Theforeman Foreman 1.6.3
Theforeman Foreman 1.11.0
Theforeman Foreman 1.13.3
Theforeman Foreman 1.12.0
Theforeman Foreman 1.12.3
Theforeman Foreman 1.11.3
Theforeman Foreman 1.13.4
Theforeman Foreman 1.10.3
Theforeman Foreman 1.9.0
Theforeman Foreman 1.9.1
Theforeman Foreman 1.12.2
Theforeman Foreman 1.9.3
Theforeman Foreman 1.8.0
Theforeman Foreman 1.11.4
Theforeman Foreman 1.10.1
Theforeman Foreman 1.15.0
Theforeman Foreman 1.7.4
Theforeman Foreman 1.7.5
Theforeman Foreman 1.7.0
Theforeman Foreman 1.8.1
5.4
CVSSv3
CVE-2016-2100
Foreman prior to 1.10.3 and 1.11.0 prior to 1.11.0-RC2 allow remote authenticated users to read, modify, or delete private bookmarks by leveraging the (1) edit_bookmarks or (2) destroy_bookmarks permission.
Theforeman Foreman
Theforeman Foreman 1.11.0
NA
CVE-2015-1816
Forman prior to 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle malicious users to spoof LDAP servers via a crafted certificate.
Theforeman Foreman
NA
CVE-2014-3491
Cross-site scripting (XSS) vulnerability in Foreman prior to 1.4.5 and 1.5.x prior to 1.5.1 allows remote malicious users to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes.
Theforeman Foreman 1.4.1
Theforeman Foreman 1.4.3
Theforeman Foreman 1.4.2
Theforeman Foreman 1.5.0
Theforeman Foreman
Theforeman Foreman 1.4.0
NA
CVE-2014-3492
Multiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman prior to 1.4.5 and 1.5.x prior to 1.5.1 allow remote malicious users to inject arbitrary web script or HTML via a parameter (1) name or (2) value related to the host.
Theforeman Foreman 1.4.1
Theforeman Foreman 1.4.3
Theforeman Foreman 1.4.2
Theforeman Foreman 1.5.0
Theforeman Foreman
Theforeman Foreman 1.4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29824
CVE-2024-30095
CVE-2024-30104
client side
CVE-2024-5840
CVE-2024-34405
unprivileged
wireless
CVE-2024-4577
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »