NVD

Id
25558  
Name
CVE-2015-3988  
Description
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-05-19  
Modified Date
2016-12-23  
Seq
2015-3988  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
134998 25558 CVE-2015-3988 RHSA-2015:1679  View
134999 25558 CVE-2015-3988 [oss-security] 20150512 CVE request for vulnerability in OpenStack Horizon  View
135000 25558 CVE-2015-3988 [oss-security] 20150512 CVE request for vulnerability in OpenStack Horizon  View
135001 25558 CVE-2015-3988 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
135002 25558 CVE-2015-3988 74666  View
135003 25558 CVE-2015-3988 https://security.openstack.org/ossa/OSSA-2015-009.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7422 JVNDB-2015-002742 OpenStack Dashboard におけるクロスサイトスクリプティングの脆弱性 OpenStack Dashboard (Horizon) には、クロスサイトスクリプティングの脆弱性が存在します CVE-2015-3988 81213 CVE-2015-3988 25558 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002742.html 2015-05-01 2015-07-31 View