CVE-2015-7518: theforeman foreman Cross-site Scripting

CVSS: 4.3v2.0MediumModified

AliasesRHSA-2016:0174

Published 17-12-2015Last modified 06-08-2024

Vulnerability summary

CVE-2015-7518 is a medium (CVSS 4.3) Cross-site Scripting vulnerability in theforeman foreman. EPSS estimates a 1.85% chance of exploitation in the next 30 days, higher than 78.8% of scored vulnerabilities.

Overall risk

18/100

0100

Low · default modelHow is this calculated?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

1.85%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

17-12-2015
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Multiple cross-site scripting (XSS) vulnerabilities in information popups in Foreman before 1.10.0 allow remote attackers to inject arbitrary web script or HTML via (1) global parameters, (2) smart class parameters, or (3) smart variables in the (a) host or (b) hostgroup edit forms.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

1.85%

Chance of exploitation in the next 30 days

Percentile

79%

Versus all other CVEs

30-day change

0.00 pp

From 1.85% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Affected systems

Redhat40 products

candlepin< 0:0.9.49.11-1.el6 | < 0:0.9.49.11-1.el7
candlepin-selinux< 0:0.9.49.11-1.el6 | < 0:0.9.49.11-1.el7
candlepin-tomcat< 0:0.9.49.11-1.el7
candlepin-tomcat6< 0:0.9.49.11-1.el6
capsule-installer< 0:2.3.25-1.el6 | < 0:2.3.25-1.el7sat

foreman< 0:1.7.2.53-1.el6_6sat | < 0:1.7.2.53-1.el7sat
foreman-compute< 0:1.7.2.53-1.el6_6sat | < 0:1.7.2.53-1.el7sat
foreman-debug< 0:1.7.2.53-1.el6_6sat | < 0:1.7.2.53-1.el7sat
foreman-gce< 0:1.7.2.53-1.el6_6sat | < 0:1.7.2.53-1.el7sat
foreman-libvirt< 0:1.7.2.53-1.el6_6sat | < 0:1.7.2.53-1.el7sat
foreman-ovirt< 0:1.7.2.53-1.el6_6sat | < 0:1.7.2.53-1.el7sat
foreman-postgresql< 0:1.7.2.53-1.el6_6sat | < 0:1.7.2.53-1.el7sat
foreman-vmware< 0:1.7.2.53-1.el6_6sat | < 0:1.7.2.53-1.el7sat
katello-installer< 0:2.3.25-1.el6 | < 0:2.3.25-1.el7sat
katello-installer-base< 0:2.3.25-1.el6 | < 0:2.3.25-1.el7sat
pulp< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-admin-client< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-nodes-child< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-nodes-common< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-nodes-parent< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-puppet< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-puppet-admin-extensions< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-puppet-plugins< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-puppet-tools< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-rpm< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-rpm-admin-extensions< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-rpm-handlers< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-rpm-plugins< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-selinux< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
pulp-server< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
python-kombu< 1:3.0.24-11.pulp.el6 | < 1:3.0.24-11.pulp.el7sat
python-pulp-agent-lib< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
python-pulp-bindings< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
python-pulp-client-lib< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
python-pulp-common< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
python-pulp-puppet-common< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
python-pulp-rpm-common< 0:2.6.0.20-1.el6 | < 0:2.6.0.20-1.el7sat
ruby193-rubygem-fog< 0:1.24.1-1.el6_6sat | < 0:1.24.1-1.el7sat
ruby193-rubygem-katello< 0:2.2.0.83-1.el6_6sat | < 0:2.2.0.83-1.el7sat
rubygem-hammer_cli_katello< 0:0.0.7.21-1.el6 | < 0:0.0.7.21-1.el7sat

Show all 40

Theforeman1 product

foreman≤ 1.9.3

2 vendors · 41 products

References

20 links

access.redhat.com/errata/RHSA-2016:0174Vendor AdvisoryX Refsource REDHATAdvisory
www.openwall.com/lists/oss-security/2015/12/09/6Mailing ListX Refsource MLIST
projects.theforeman.org/issues/12611X Refsource CONFIRM
theforeman.org/security.htmlX Refsource CONFIRMVendor Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1132659REPORT
bugzilla.redhat.com/show_bug.cgi?id=1215838REPORT
bugzilla.redhat.com/show_bug.cgi?id=1244130REPORT
bugzilla.redhat.com/show_bug.cgi?id=1259057REPORT
bugzilla.redhat.com/show_bug.cgi?id=1276911REPORT

Show all 20 references

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities