Synced 17 Jun 2026 22:27 UTC Account

Is Foreman 2.2.3 patched?

The Foreman · cycle 2.2 · end of life · Official site ↗
2.2.340/100End of life

Current stable (3.18.1): 92/100

Health score40/100
Open issues7
Exploited now0
Cycle 2.2 EOL2021-03-19
Latest release3.18.1

Summary iPlain-English security status for Foreman 2.2.3, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Foreman 2.2.3 is part of the 2.2 release line. 7 known vulnerabilities affect it. The 2.2 line reached end-of-life on 2021-03-19, so it no longer receives security patches. The latest supported Foreman release is 3.18.1.

Known issues affecting 2.2.3

Exploited first, then by exploitation probability.

CVE-2021-3584 HIGH EPSS 4% → fixed in 2.5.1 CVE-2023-0462 HIGH EPSS 1% → fixed in 3.8.0 CVE-2021-3590 HIGH EPSS 1% → see advisory CVE-2021-3494 MEDIUM EPSS 0% → fixed in 2.5.0 CVE-2025-9572 MEDIUM EPSS 0% → fixed in 3.16.2 CVE-2021-3469 MEDIUM EPSS 0% → fixed in 2.3.4 CVE-2023-4886 MEDIUM EPSS 0% → fixed in 3.8.0

Other Foreman versions

Check another release line of Foreman.

Foreman 3.18.1Foreman 3.17.2Foreman 3.16.3Foreman 3.15.1Foreman 3.14.0Foreman 3.13.1Foreman 3.12.1Foreman 3.11.5Foreman 3.10.1Foreman 3.9.3Foreman 3.8.0Foreman 3.7.1Foreman 3.6.2Foreman 3.5.3Foreman 3.4.1Foreman 3.3.1Foreman 3.2.1Foreman 3.1.3Foreman 3.0.2Foreman 2.5.4Foreman 2.4.1Foreman 2.3.5Foreman 2.1.4Foreman 2.0.3Foreman 1.24.3Foreman 1.23.2Foreman 1.22.2Foreman 1.21.4Foreman 1.20.3Foreman 1.19.1Foreman 1.18.3Foreman 1.17.4Foreman 1.16.2Foreman 1.15.7Foreman 1.14.3Foreman 1.13.4Foreman 1.12.4Foreman 1.11.4Foreman 1.10.4Foreman 1.9.3Foreman 1.8.4Foreman 1.7.5Foreman 1.6.3Foreman 1.5.3Foreman 1.4.5Foreman 1.3.2Foreman 1.2.3

Frequently asked

Is Foreman 2.2.3 patched?

Foreman 2.2.3 is end-of-life and no longer receives security patches. Move to 3.18.1.

When does Foreman 2.2 reach end-of-life?

Foreman 2.2 reached end-of-life on 2021-03-19 and no longer receives security patches.

What is the latest version of Foreman?

The latest supported Foreman release is 3.18.1.

Is Foreman 2.2.3 still receiving security updates?

No — Foreman 2.2.3 is on the 2.2 line, which reached end-of-life on 2021-03-19 and no longer receives security updates. Upgrade to 3.18.1 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against The Foreman's official advisory before you patch or upgrade — Foreman official site ↗