- How many CVEs does theforeman have?
- theforeman has 112 published CVE records since 2012, including 18 in the last two years.
- How many theforeman CVEs are in CISA KEV?
- None of theforeman's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which theforeman products have the most CVEs?
- The theforeman products with the most published CVEs are foreman, smart-proxy, katello, foreman-installer, foreman ansible.
- What are the most common weakness types in theforeman CVEs?
- theforeman's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-264, CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
- Are there public exploits for theforeman vulnerabilities?
- Yes — 16 of theforeman's CVEs have a known public exploit.
- How many critical theforeman vulnerabilities are there?
- theforeman has 9 critical and 36 high-severity CVEs.
- What is the average severity of theforeman CVEs?
- The average CVSS base score across theforeman's scored CVEs is 6.5.