Openstack

Horizon

22 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2014-8578

  • EPSS 0.34%
  • Published 31.10.2014 15:55:04
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address...

3.5

CVE-2014-3474

Exploit
  • EPSS 0.3%
  • Published 31.10.2014 15:55:04
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users ...

4.3

CVE-2014-3473

  • EPSS 0.4%
  • Published 31.10.2014 15:55:03
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Or...

3.5

CVE-2014-3594

Exploit
  • EPSS 0.61%
  • Published 22.08.2014 14:55:07
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Host Aggregates interface in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-3 allows remote administrators to inject arbitrary web script or HTML via a new h...

5.5

CVE-2013-4471

  • EPSS 0.18%
  • Published 14.05.2014 19:55:10
  • Last modified 12.04.2025 10:46:40

The Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to change a user password by leveraging the authentication ...

4.3

CVE-2014-0157

  • EPSS 0.26%
  • Published 15.04.2014 14:55:04
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to inject arbitrary web script or HTML via the descri...

4.3

CVE-2013-6858

  • EPSS 0.76%
  • Published 23.11.2013 17:55:03
  • Last modified 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

4.3

CVE-2012-3542

  • EPSS 1.76%
  • Published 05.09.2012 23:55:02
  • Last modified 11.04.2025 00:51:21

OpenStack Keystone, as used in OpenStack Folsom before folsom-rc1 and OpenStack Essex (2012.1), allows remote attackers to add an arbitrary user to an arbitrary tenant via a request to update the user's default tenant to the administrative API. NOTE...

5.8

CVE-2012-3540

Exploit
  • EPSS 1.92%
  • Published 05.09.2012 23:55:02
  • Last modified 11.04.2025 00:51:21

Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: th...

4.9

CVE-2012-3426

Exploit
  • EPSS 0.21%
  • Published 31.07.2012 10:45:42
  • Last modified 11.04.2025 00:51:21

OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by (1) creating n...