Red Hat Satellite Capsule vulnerabilities

14 CVEs affecting Red Hat Satellite Capsule, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9572, published 2026-02-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-15095, published 2018-02-06. Critical severity, CVSS 9.8. EPSS: 8.4% chance of exploitation in the next 30 days. A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously…
CVE-2017-5929, published 2017-03-13. Critical severity, CVSS 9.8. EPSS: 7.5% chance of exploitation in the next 30 days. QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.
CVE-2018-1000632, published 2018-08-20. High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days. dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents…
CVE-2018-10237, published 2018-04-26. Medium severity, CVSS 5.9. EPSS: 5.1% chance of exploitation in the next 30 days. Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize…
CVE-2020-10693, published 2020-05-06. Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days. A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows…
CVE-2016-1000338, published 2018-06-01. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up…
CVE-2016-8639, published 2018-08-01. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. It was found that foreman before 1.13.0 is vulnerable to a stored XSS via an organization or location name. This could allow an attacker with privileges to set the organization or location name to…
CVE-2017-15100, published 2017-11-27. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts page, when clicking on the "chart" button and hovering over the chart; (2) Trends…
CVE-2020-10716, published 2021-05-27. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not properly restricted to the view. This flaw allows a malicious Satellite user to scan through the Job…
CVE-2017-2667, published 2018-03-12. High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days. Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not…

Latest

CVE-2025-9572, published 2026-02-27. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions. Unlike the REST API, which correctly enforces access controls, the…
CVE-2016-9595, published 2018-07-27. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them…
CVE-2018-5382, published 2018-04-16. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a…