CVE-2013-6858

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.73%

Published

Nov 23, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" or (2) "Network Topology" page.

Weaknesses (CWE)

CWE-79

Affected Products (5)

openstack · horizonvulnerable

opensuse · opensusevulnerable

canonical · ubuntu_linuxvulnerable

References (12)

http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html

Mailing ListThird Party Advisory

http://secunia.com/advisories/55770

Third Party Advisory

http://secunia.com/advisories/56117

Third Party Advisory

http://www.securityfocus.com/bid/63787

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2062-1

Third Party Advisory

https://bugs.launchpad.net/horizon/+bug/1247675

Issue TrackingPatchThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html

Mailing ListThird Party Advisory

http://secunia.com/advisories/55770

Third Party Advisory

http://secunia.com/advisories/56117

Third Party Advisory

http://www.securityfocus.com/bid/63787

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2062-1

Third Party Advisory

https://bugs.launchpad.net/horizon/+bug/1247675

Issue TrackingPatchThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs