The vulnerability of the ovirt-engine manager, a tool for managing virtual infrastructure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the ovirt-engine manager, a tool for managing virtual infrastructure, is related to the lack of protection for the web page structure during the processing of the errordescription parameter. Exploiting this vulnerability allows an attacker operating remotely to perform...