Red Hat Red Hat Satellite 6.15 for RHEL 8

• CVE-2025-9572 Medium 5.0 Foreman: satellite: graphql api permission bypass leads to information disclosure 0.4%
• CVE-2025-10622 High 8.0 Foreman: os command injection via ct_location and fcct_location parameters 0.7%
• CVE-2024-8553 Medium 6.3 Foreman: read-only access to entire db from templates 0.4%
• CVE-2024-7923 Critical 9.8 Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 0.8%
• CVE-2024-7012 Critical 9.8 Puppet-foreman: an authentication bypass vulnerability exists in foreman 0.8%
• CVE-2024-4871 Medium 6.8 Foreman: host ssh key not being checked in remote execution 0.6%
• CVE-2023-4320 High 7.6 Satellite: arithmetic overflow in satellite 0.7%
• CVE-2023-5189 Medium 6.3 Hub: insecure galaxy-importer tarfile extraction 1.0%