Unscored severity · published Nov 23, 2013
CVE-2013-6858
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HO
Horizon · Openstack
2013.1 through 2013.2 · source: NVD
OP
Opensuse · Opensuse
13.1 · source: NVD
UL
Ubuntu Linux · Canonical
12.10; 13.04; 13.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6858
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6858
Mailing List
http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html
Third Party Advisory
http://secunia.com/advisories/55770
Third Party Advisory
http://secunia.com/advisories/56117
Third Party Advisory
http://www.securityfocus.com/bid/63787
Third Party Advisory
http://www.ubuntu.com/usn/USN-2062-1
Issue Tracking
https://bugs.launchpad.net/horizon/+bug/1247675
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation