openstack-dashboard vulnerabilities (Red Hat)

21 vulnerabilities.

• openstack-dashboard Red Hat Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls CVE-2026-32283 Fix available 7.5 HighApril 7, 2026
• openstack-dashboard Red Hat TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix CVE-2026-32282 Fix available 6.4 MediumApril 7, 2026
• openstack-dashboard Red Hat Unexpected work during chain building in crypto/x509 CVE-2026-32280 Fix available 7.5 HighApril 7, 2026
• openstack-dashboard Red Hat Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Fix available 7.5 HighMarch 6, 2026
• openstack-dashboard Red Hat OpenStack Nova calls qemu-img without format restrictions for resize CVE-2026-24708 Fix available 8.2 HighFebruary 17, 2026
• openstack-dashboard Red Hat Unexpected session resumption in crypto/tls CVE-2025-68121 Fix available 10.0 CriticalJanuary 16, 2026
• openstack-dashboard Red Hat Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 Fix available 7.5 HighJanuary 16, 2026
• openstack-dashboard Red Hat OpenStack Horizon Open redirect in workflow forms CVE-2020-29565 Fix available 6.1 MediumDecember 4, 2020
• openstack-dashboard Red Hat OpenStack Horizon Cross-site Scripting (XSS) CVE-2017-7400 Fix available 4.8 MediumApril 3, 2017
• openstack-dashboard Red Hat OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2016-4428 Fix available 5.4 MediumJune 18, 2016
• openstack-dashboard Red Hat OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability CVE-2015-3219 Fix available 4.3 MediumAugust 20, 2015
• openstack-dashboard Red Hat Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0... CVE-2015-3988 Fix available 3.5 LowMay 19, 2015
• openstack-dashboard Red Hat Cross-site scripting (XSS) vulnerability in the Groups panel in OpenStack Dashboard (Horizon)... CVE-2014-8578 Fix available 3.5 LowOctober 31, 2014
• openstack-dashboard Red Hat OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly... CVE-2014-8124 Fix available 5.0 MediumAugust 28, 2014
• openstack-dashboard Red Hat OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface CVE-2014-3594 Fix available 3.5 LowAugust 19, 2014
• openstack-dashboard Red Hat Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard... CVE-2014-3475 Fix available 3.5 LowJuly 9, 2014
• openstack-dashboard Red Hat OpenStack Horizon Cross-site scripting (XSS) vulnerability CVE-2014-3474 Fix available 3.5 LowJuly 9, 2014
• openstack-dashboard Red Hat Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name CVE-2014-3473 Fix available 4.3 MediumJuly 9, 2014
• openstack-dashboard Red Hat OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting CVE-2014-0157 Fix available 4.3 MediumApril 15, 2014
• openstack-dashboard Red Hat Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and... CVE-2013-6858 Fix available 4.3 MediumNovember 23, 2013
• openstack-dashboard Red Hat Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1... CVE-2012-3540 Fix available 5.8 MediumSeptember 5, 2012