Approved changes feed: RSS · Atom
cpe:2.3:a:foreman_project:foreman:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Foreman Project (61e61bfa-66ce-59f7-bc72-ef6ad87211af) |
|---|---|
| Product | Foreman (3225010b-0cbb-5221-a0cd-388eeccd48e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1097 |
vulnerable | 2026-06-08 05:11:16.891394 |
Details available
A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts on and off to discover the username and password used to connect to the compute resource.
Published: 2018-04-04T21:00:00.000Z
Updated: 2024-08-05T03:51:48.439Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1096 |
vulnerable | 2026-06-08 05:11:16.890233 |
Details available
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could use this flaw to perform an SQL injection attack on the back end database.
Published: 2018-04-05T21:00:00.000Z
Updated: 2024-09-16T17:02:50.444Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15100 |
vulnerable | 2026-06-08 05:08:57.909270 |
Details available
An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button and hovering over the chart; (2) Trends page, when checking the graph for a trend based on a such fact; (3) Statistics page, for facts that are aggregated on this page.
Published: 2017-11-27T14:00:00.000Z
Updated: 2024-08-05T19:50:16.130Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.