Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-0157
HistoryApr 15, 2014 - 12:00 a.m.

CVE-2014-0157

2014-04-1500:00:00
ubuntu.com
ubuntu.com
14

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.3%

Cross-site scripting (XSS) vulnerability in the Horizon Orchestration
dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and
icehouse before icehouse-rc2 allows remote attackers to inject arbitrary
web script or HTML via the description field of a Heat template.

OSVersionArchitecturePackageVersionFilename
ubuntu13.10noarchhorizon<ย 1:2013.2.3-0ubuntu1.1UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.3%