Cross-site Scripting (XSS)

2020-09-2410:56:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

34.0%

JSON

ovirt-engine is vulnerable to cross-site scripting (XSS). The vulnerability exists as it displays and executes unsanitized user controlled parameters.

CPENameOperatorVersion
ovirt-engine-extension-aaa-ldapeq1.4.0__1.el8ev
ansible-runner-serviceeq1.0.4__1.el8
ansible-runner-serviceeq1.0.1__5.el8
ansible-runner-serviceeq1.0.2__1.el8
ansible-runner-serviceeq1.0.3__1.el8
ansible-runner-serviceeq1.0.4__1.el8ev
ansible-runner-serviceeq1.0.2__1.el8ev
ansible-runner-serviceeq0.9__3.el8cp
rhvm-dependencieseq4.4.0__1.el8ev
ovirt-web-uieq1.6.3__1.el8ev

Name	Operator	Version
ovirt-engine-extension-aaa-ldap	eq	1.4.0__1.el8ev
ansible-runner-service	eq	1.0.4__1.el8
ansible-runner-service	eq	1.0.1__5.el8
ansible-runner-service	eq	1.0.2__1.el8
ansible-runner-service	eq	1.0.3__1.el8
ansible-runner-service	eq	1.0.4__1.el8ev
ansible-runner-service	eq	1.0.2__1.el8ev
ansible-runner-service	eq	0.9__3.el8cp
rhvm-dependencies	eq	4.4.0__1.el8ev
ovirt-web-ui	eq	1.6.3__1.el8ev