theforeman
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 108 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 25, 2012 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Foreman: excessive permissions for viewer role on preview
Foreman: foreman: arbitrary code execution via safemode sandbox bypass
Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup
Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
Foreman: ssti and insecure deserialization in foreman-rake configuration
Foreman: command injection in foreman-tail
Foreman: command injection in foreman-rake database tasks
Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter
Foreman: unauthenticated information disclosure via provisioning token validation flaw
Foreman-mcp-server: mcp server: active session hijacking via insecure session state reuse
Monitor theforeman in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.