Approved changes feed: RSS · Atom
cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Theforeman (760bf134-312a-50ab-8452-1d7485d10f9b) |
|---|---|
| Product | Foreman (a88a3ac5-9a3c-5a4c-91ec-c5eca465eab6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/ruby-foreman |
purl2cpe | 2026-06-01 10:15:04.526567 |
pkg:deb/ubuntu/ruby-foreman |
purl2cpe | 2026-06-01 10:15:04.526570 |
pkg:gem/foreman |
purl2cpe | 2026-06-01 10:15:04.526573 |
pkg:github/theforeman/foreman |
purl2cpe | 2026-06-01 10:15:04.526576 |
pkg:rpm/opensuse/rubygem-foreman |
purl2cpe | 2026-06-01 10:15:04.526579 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9572 |
vulnerable | 2026-06-08 07:45:22.709724 |
Foreman: satellite: graphql api permission bypass leads to information disclosure
MEDIUM (5)
n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the GraphQL endpoint does not apply proper filtering, leading to an authorization bypass.
Published: 2026-02-27T07:28:44.391Z
Updated: 2026-03-24T11:28:32.518Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4886 |
vulnerable | 2026-06-08 06:16:14.796248 |
Foreman: world readable file containing secrets
MEDIUM (6.7)
A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable.
Published: 2023-10-03T14:24:56.342Z
Updated: 2026-02-25T18:32:04.057Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0462 |
vulnerable | 2026-06-08 05:52:05.128423 |
Arbitrary code execution through yaml global parameters
HIGH (8)
An arbitrary code execution flaw was found in Foreman. This issue may allow an admin user to execute arbitrary code on the underlying operating system by setting global parameters with a YAML payload.
Published: 2023-09-20T13:40:43.213Z
Updated: 2024-09-24T15:05:20.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0118 |
vulnerable | 2026-06-08 05:52:04.310462 |
Foreman: arbitrary code execution through templates
CRITICAL (9.1)
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
Published: 2023-09-20T13:39:27.756Z
Updated: 2024-09-17T13:51:28.373Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3590 |
vulnerable | 2026-06-08 05:33:52.890863 |
Details available
A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Published: 2022-08-22T14:48:17.000Z
Updated: 2024-08-03T17:01:06.607Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3584 |
vulnerable | 2026-06-08 05:33:52.879344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3494 |
vulnerable | 2026-06-08 05:33:52.478923 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3469 |
vulnerable | 2026-06-08 05:33:52.388268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20260 |
vulnerable | 2026-06-08 05:29:08.836503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10710 |
vulnerable | 2026-06-08 05:16:35.697684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3893 |
vulnerable | 2026-06-08 05:13:56.320819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1097 |
vulnerable | 2026-06-08 05:11:16.891520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1096 |
vulnerable | 2026-06-08 05:11:16.890956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16861 |
vulnerable | 2026-06-08 05:11:05.600497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7535 |
vulnerable | 2026-06-08 05:09:56.466425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2672 |
vulnerable | 2026-06-08 05:09:24.929870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15100 |
vulnerable | 2026-06-08 05:08:57.909830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9593 |
vulnerable | 2026-06-08 05:08:24.092814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8639 |
vulnerable | 2026-06-08 05:08:14.526778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7077 |
vulnerable | 2026-06-08 05:08:11.711737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6320 |
vulnerable | 2026-06-08 05:07:59.600802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6319 |
vulnerable | 2026-06-08 05:07:59.600443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5390 |
vulnerable | 2026-06-08 05:07:56.909768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4995 |
vulnerable | 2026-06-08 05:07:55.894232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4475 |
vulnerable | 2026-06-08 05:07:54.640285 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4451 |
vulnerable | 2026-06-08 05:07:47.457960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2100 |
vulnerable | 2026-06-08 05:07:32.962364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7518 |
vulnerable | 2026-06-08 05:07:01.232430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5233 |
vulnerable | 2026-06-08 05:06:49.302538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3235 |
vulnerable | 2026-06-08 05:06:37.717777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3155 |
vulnerable | 2026-06-08 05:06:37.320544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1844 |
vulnerable | 2026-06-08 05:06:26.424305 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1816 |
vulnerable | 2026-06-08 05:06:26.331941 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8183 |
vulnerable | 2026-06-08 05:06:08.288966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4507 |
vulnerable | 2026-06-08 05:05:44.984751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3691 |
vulnerable | 2026-06-08 05:05:42.456975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3653 |
vulnerable | 2026-06-08 05:05:42.181382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3531 |
vulnerable | 2026-06-08 05:05:33.326556 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3492 |
vulnerable | 2026-06-08 05:05:32.994244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3491 |
vulnerable | 2026-06-08 05:05:32.991170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0208 |
vulnerable | 2026-06-08 05:05:12.199357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0090 |
vulnerable | 2026-06-08 05:05:11.383644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0007 |
vulnerable | 2026-06-08 05:05:10.536255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4386 |
vulnerable | 2026-06-08 05:04:35.891029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4182 |
vulnerable | 2026-06-08 05:04:34.429392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4180 |
vulnerable | 2026-06-08 05:04:34.425636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0210 |
vulnerable | 2026-06-08 05:03:45.855862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0187 |
vulnerable | 2026-06-08 05:03:45.720043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0174 |
vulnerable | 2026-06-08 05:03:45.646329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0173 |
vulnerable | 2026-06-08 05:03:45.646018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0171 |
vulnerable | 2026-06-08 05:03:45.644000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5648 |
vulnerable | 2026-06-08 05:02:57.760822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5477 |
vulnerable | 2026-06-08 05:02:56.662417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.