CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
47.4%
Cross-site scripting (XSS) vulnerability in the “Shares” overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the “Create Share” form.
rhn.redhat.com/errata/RHSA-2016-2115.html
rhn.redhat.com/errata/RHSA-2016-2116.html
rhn.redhat.com/errata/RHSA-2016-2117.html
www.openwall.com/lists/oss-security/2016/09/15/7
www.securityfocus.com/bid/93001
bugs.launchpad.net/manila-ui/+bug/1597738
bugzilla.redhat.com/show_bug.cgi?id=1375147
github.com/advisories/GHSA-vq76-5ghr-9p4v
github.com/openstack/manila-ui/commit/009913d725bee34cef0bd62e47a298025ace2696
github.com/openstack/manila-ui/commit/89593686ef18f2bd06223b92071b4be2362a5abd
github.com/openstack/manila-ui/commit/fca19a1b0d42536644212c5d673fbd6866e67c43
nvd.nist.gov/vuln/detail/CVE-2016-6519
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
Confidence
High
EPSS
Percentile
47.4%