{"id":"CVE-2015-3988","aliases":["DEBIAN-CVE-2015-3988","EUVD-2015-4018","GHSA-chfp-7692-g532","RHSA-2015:1679","SUSE-SU-2015:2064-1"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0...","description":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.","severity":{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01787,"percentile":0.78481,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2015-05-19T18:00:00Z","modified":"2026-09-10T06:00:05Z","fixes":[{"ecosystem":"Debian:12","package":"horizon","fixed_in":["2015.1.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"horizon","fixed_in":["2015.1.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"horizon","fixed_in":["2015.1.0-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.1.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.1.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.1.0-2"}]}]},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-7.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"openstack-dashboard-theme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-7.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"python-django-horizon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-7.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:6::el7","package":"python-django-horizon-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2014.2.3-7.el7ost"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"crowbar-barclamp-nova_dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9+git.1443622531.b2b2939-9.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"openstack-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.2.4~a0~dev12-13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 5","package":"python-django_openstack_auth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.7-11.3"}]}],"bundled":2}],"products":[{"vendor":"openstack","product":"horizon"},{"vendor":"oracle","product":"solaris"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2015/05/12/9","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.openstack.org/ossa/OSSA-2015-009.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1679.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/05/14/14","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/74666","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3988","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-chfp-7692-g532"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3988","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1679","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1187992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196249","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1222871","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1228534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1243301","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1679.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3219","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3219","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3988","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3988","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152064-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/928891","tags":["report"]},{"url":"https://bugzilla.suse.com/931437","tags":["report"]},{"url":"https://bugzilla.suse.com/933607","tags":["report"]},{"url":"https://bugzilla.suse.com/933722","tags":["report"]},{"url":"https://bugzilla.suse.com/935442","tags":["report"]},{"url":"https://bugzilla.suse.com/936059","tags":["report"]},{"url":"https://bugzilla.suse.com/936368","tags":["report"]},{"url":"https://bugzilla.suse.com/945052","tags":["report"]},{"url":"https://bugzilla.suse.com/945515","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3988","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-3988","description":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.","status":"published","published":"2015-05-19T18:00:00Z","modified":"2024-08-06T06:04:02.623Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-4018","description":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.","status":"published","published":"2015-05-19T18:00:00Z","modified":"2024-08-06T06:04:02Z","updated_at":"2026-11-03T02:22:05.665475Z"}],"ghsa":[{"id":"GHSA-chfp-7692-g532","title":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0...","description":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.","status":"published","published":"2022-05-17T03:17:05Z","modified":"2023-01-27T05:01:44Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:41:57.342579Z"}],"nvd":[{"id":"CVE-2015-3988","description":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.","status":"published","published":"2015-05-19T18:59:08.51Z","modified":"2026-06-17T00:26:35.51Z","cvss":[{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:03:04.906059Z"}],"osv":[{"id":"CVE-2015-3988","description":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.","status":"published","published":"2015-05-19T18:59:08Z","modified":"2026-04-10T03:45:17.325898Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-3988","description":"Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.","status":"published","published":"2015-05-19T18:59:08.51Z","modified":"2026-09-10T06:00:05.962544909Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"RHSA-2015:1679","title":"Red Hat Security Advisory: python-django-horizon security and bug fix update","status":"published","published":"2024-09-15T22:44:21Z","modified":"2026-08-08T10:15:09.271937944Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:2064-1","title":"Security update for openstack-dashboard","description":"\nThis update provides fixes and enhancements for openstack-dashboard,\ncrowbar-barclamp-nova_dashboard and python-django_openstack_auth.\n\nopenstack-dashboard:\n\n- Reset flavors for other than 'Boot from Image' source type. (bsc#945515)\n- Add deactivated status for glance image.\n- Fix TemplateSyntaxError at hypervisors view.\n- Fix addition of plugin panel to panel group.\n- Remove admin role name 'admin' hardcode. (bsc#935442)\n- Escape the description param from heat template. (bsc#933722, CVE-2015-3219)\n- Enhance policy rules to workflow actions and identity project.\n- Sanitation of metadata passed from Django to avoid persistent XSS. (bsc#931437, CVE-2015-3988)\n- Fix Terminate Instance on network topology page.\n- Show ports from shared nets in floating IP assoc.\n- Fix incorrect ca arguments for calling ceilometer client.\n- Fix dynamic select layout when help block is displayed.\n- Pass correct project ID to get tenant_usages. (bsc#928891)\n\ncrowbar-barclamp-nova_dashboard:\n\n- Allow switching on multidomain support. (bsc#945052)\n- Fix quoting of supported_provider_types. (bsc#936368)\n- Enable the POLICY_FILES setting configuration.\n- Fix attribute being fetched from wrong node. (bsc#936059)\n\npython-django_openstack_auth:\n\n- Remove admin role name 'admin' hardcode in User.is_superuser().\n","status":"published","published":"2015-11-20T13:11:32Z","modified":"2026-02-04T02:13:25.212812Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}