NVD

Id
35588  
Name
CVE-2014-8578  
Description
Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-3475.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-31  
Modified Date
2014-11-03  
Seq
2014-8578  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182192 35588 CVE-2014-8578 [oss-security] 20140708 [OSSA 2014-023] Multiple XSS vulnerabilities in Horizon (CVE-2014-3473, CVE-2014-3474, and CVE-2014-3475)  View
182193 35588 CVE-2014-8578 68456  View
182194 35588 CVE-2014-8578 https://bugs.launchpad.net/horizon/+bug/1320235  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16310 JVNDB-2014-005185 OpenStack Dashboard の Groups パネルにおけるクロスサイトスクリプティングの脆弱性 OpenStack Dashboard (Horizon) の Groups パネルには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-8578 75871 CVE-2014-8578 35588 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005185.html 2014-07-23 2014-11-04 View