ByteOS Network

NVD Vulnerability Details :

CVE-2016-6319

Deferred

Source-secalert@redhat.com

Published At-19 Aug, 2016 | 21:59

Updated At-12 Apr, 2025 | 10:46

Cross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2, as used by Remote Execution and possibly other plugins, allows remote attackers to inject arbitrary web script or HTML via the label parameter.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.1	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

The Foreman

>>foreman>>Versions up to 1.12.1(inclusive)

cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://projects.theforeman.org/issues/16019	secalert@redhat.com	Vendor Advisory
http://projects.theforeman.org/issues/16024	secalert@redhat.com	Vendor Advisory
http://www.securityfocus.com/bid/92429	secalert@redhat.com	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:0336	secalert@redhat.com	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=1365815	secalert@redhat.com	Issue Tracking Third Party Advisory VDB Entry
https://github.com/theforeman/foreman/commit/0f35fe14acf0d0d3b55e9337bc5e2b9640ff2372	secalert@redhat.com	Patch
https://theforeman.org/security.html#2016-6319	secalert@redhat.com	Vendor Advisory
http://projects.theforeman.org/issues/16019	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://projects.theforeman.org/issues/16024	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/92429	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:0336	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=1365815	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory VDB Entry
https://github.com/theforeman/foreman/commit/0f35fe14acf0d0d3b55e9337bc5e2b9640ff2372	af854a3a-2127-422b-91ae-364da2661108	Patch
https://theforeman.org/security.html#2016-6319	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History