PT-2014-3518 · Red Hat · Cloudforms

Published

2014-07-07

·

Updated

2023-02-13

·

CVE-2014-0176

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions CloudForms versions prior to 5.2.4.2
Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system.
Recommendations For versions prior to 5.2.4.2, update to version 5.2.4.2 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-0176
RHSA-2014:0816

Affected Products

Cloudforms