{"id":"CVE-2014-3475","aliases":["DEBIAN-CVE-2014-3475","EUVD-2014-3485","GHSA-vw9p-vx37-72h4","RHSA-2014:0939","RHSA-2014:1188","SUSE-RU-2015:0410-1","UBUNTU-CVE-2014-3475","USN-2323-1"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard...","description":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.","severity":{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01235,"percentile":0.69209,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2014-07-09T00:00:00Z","modified":"2026-10-23T15:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"horizon","fixed_in":["2014.1.1-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"horizon","fixed_in":["2014.1.1-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"horizon","fixed_in":["2014.1.1-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"horizon","fixed_in":["1:2014.1.2-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.1.1-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.1.1-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.1.1-3"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.1-2.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"openstack-dashboard-theme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.1-2.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"python-django-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.1-2.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:5::el7","package":"python-django-horizon-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.1.1-2.el7ost"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-3.el6ost"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"openstack-dashboard-theme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-3.el6ost"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"python-django-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-3.el6ost"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:openstack:4::el6","package":"python-django-horizon-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2013.2.3-3.el6ost"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2014.1.2-0ubuntu1"}]}],"versions":["1:2013.2~rc3-0ubuntu1","1:2013.2-0ubuntu1","1:2014.1~b1-0ubuntu1","1:2014.1~b2-0ubuntu1","1:2014.1~b2-0ubuntu2","1:2014.1~b3-0ubuntu1","1:2014.1~b3-0ubuntu2","1:2014.1~rc1-0ubuntu1","1:2014.1~rc2-0ubuntu1","1:2014.1-0ubuntu1","1:2014.1.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2014.1.2-0ubuntu1.1"}]}],"versions":["1:2013.2~rc3-0ubuntu1","1:2013.2-0ubuntu1","1:2014.1~b1-0ubuntu1","1:2014.1~b2-0ubuntu1","1:2014.1~b2-0ubuntu2","1:2014.1~b3-0ubuntu1","1:2014.1~b3-0ubuntu2","1:2014.1~rc1-0ubuntu1","1:2014.1~rc2-0ubuntu1","1:2014.1-0ubuntu1","1:2014.1.1-0ubuntu1","1:2014.1.2-0ubuntu1"],"bundled":4}],"products":[{"vendor":"openstack","product":"horizon"},{"vendor":"opensuse","product":"opensuse"}],"references":[{"url":"http://www.securityfocus.com/bid/68456","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugs.launchpad.net/horizon/+bug/1320235","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2014/07/08/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","article","fix"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-01/msg00040.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3475","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:0939","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1188","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116090","tags":["report"]},{"url":"https://github.com/advisories/GHSA-vw9p-vx37-72h4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3475","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1042030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1117901","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0939.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3473","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3473","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3473","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3474","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3474","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3474","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3475","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8578","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8578","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129774","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1188.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3594","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3594","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement//suse-ru-20150410-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/891815","tags":["report"]},{"url":"https://bugzilla.suse.com/891904","tags":["report"]},{"url":"https://bugzilla.suse.com/897815","tags":["report"]},{"url":"https://bugzilla.suse.com/908199","tags":["report"]},{"url":"https://bugzilla.suse.com/910008","tags":["report"]},{"url":"https://bugzilla.suse.com/913692","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8124","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-3475","tags":["report"]},{"url":"https://marc.info/?l=oss-security\u0026m=140483587504490\u0026w=2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2323-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3473","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3474","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3594","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-3475","description":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.","status":"published","published":"2014-10-31T15:00:00Z","modified":"2024-08-06T10:43:06.308Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3485","description":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.","status":"published","published":"2014-10-31T15:00:00Z","modified":"2024-08-06T10:43:06Z","updated_at":"2026-11-03T01:57:10.864648Z"}],"ghsa":[{"id":"GHSA-vw9p-vx37-72h4","title":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard...","description":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.","status":"published","published":"2022-05-13T01:11:28Z","modified":"2023-02-10T05:06:09Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:54:00.716708Z"}],"nvd":[{"id":"CVE-2014-3475","description":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.","status":"published","published":"2014-10-31T15:55:04.29Z","modified":"2026-06-17T00:08:15.78Z","cvss":[{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:56.921017Z"}],"osv":[{"id":"CVE-2014-3475","description":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.","status":"published","published":"2014-10-31T15:55:04Z","modified":"2026-04-10T03:44:39.974174Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3475","description":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.","status":"published","published":"2014-10-31T15:55:04.29Z","modified":"2026-10-23T15:47:25.495840713Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"RHSA-2014:0939","title":"Red Hat Security Advisory: python-django-horizon security, bug fix, and enhancement update","status":"published","published":"2024-09-15T21:52:23Z","modified":"2026-08-01T10:30:09.868636278Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1188","title":"Red Hat Security Advisory: python-django-horizon security update","status":"published","published":"2024-09-15T21:53:26Z","modified":"2026-08-01T10:30:29.534683851Z","updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"SUSE-RU-2015:0410-1","title":"Security update for openstack-dashboard","description":"\nThis update for openstack-dashboard fixes a cross-site scripting issue on \nthe unordered_list filter. (bnc#891815, CVE-2014-3594)\n\nSecurity Issues:\n\n    * CVE-2014-3475\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3475\u003e\n\n","status":"published","published":"2014-08-28T12:06:29Z","modified":"2026-02-04T03:59:04.529562Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2014-3475","description":"Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators to inject arbitrary web script or HTML via a user email address, a different vulnerability than CVE-2014-8578.","status":"published","published":"2014-07-09T00:00:00Z","modified":"2026-02-04T03:22:59.527083Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-2323-1","title":"horizon vulnerabilities","description":"Jason Hullinger discovered that OpenStack Horizon did not properly perform\ninput sanitization on Heat templates. If a user were tricked into using a\nspecially crafted Heat template, an attacker could conduct cross-site\nscripting attacks. With cross-site scripting vulnerabilities, if a user\nwere tricked into viewing server output during a crafted server request, a\nremote attacker could exploit this to modify the contents, or steal\nconfidential data, within the same domain. (CVE-2014-3473)\n\nCraig Lorentzen discovered that OpenStack Horizon did not properly perform\ninput sanitization when creating networks. If a user were tricked into\nlaunching an image using the crafted network name, an attacker could\nconduct cross-site scripting attacks. (CVE-2014-3474)\n\nMichael Xin discovered that OpenStack Horizon did not properly perform\ninput sanitization when adding users. If an admin user were tricked into\nviewing the users page containing a crafted email address, an attacker\ncould conduct cross-site scripting attacks. (CVE-2014-3475)\n\nDennis Felsch and Mario Heiderich discovered that OpenStack Horizon did not\nproperly perform input sanitization when creating host aggregates. If an\nadmin user were tricked into viewing the Host Aggregates page containing a\ncrafted availability zone name, an attacker could conduct cross-site\nscripting attacks. (CVE-2014-3594)\n","status":"published","published":"2014-08-21T20:51:32Z","modified":"2026-02-10T04:40:49Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}