Search for packages
| purl | pkg:rpm/redhat/python-django-horizon@2014.1.1-2?arch=el7ost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-dsg5-s5y9-nbe3
Aliases: CVE-2014-3473 GHSA-8vwv-2v7v-jmgr |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject arbitrary web script or HTML via a crafted template. | There are no reported fixed by versions. |
|
VCID-n2fx-xctw-r7fr
Aliases: CVE-2014-8578 |
openstack-horizon: multiple XSS flaws | There are no reported fixed by versions. |
|
VCID-tngh-mgyc-xka4
Aliases: CVE-2014-3475 |
openstack-horizon: multiple XSS flaws | There are no reported fixed by versions. |
|
VCID-zxjy-82n2-mkdb
Aliases: CVE-2014-3474 GHSA-j57p-g33w-95c5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users to inject arbitrary web script or HTML via a network name. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:47:34.044355+00:00 | RedHat Importer | Affected by | VCID-n2fx-xctw-r7fr | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8578.json | 38.0.0 |
| 2026-04-01T14:47:34.007575+00:00 | RedHat Importer | Affected by | VCID-tngh-mgyc-xka4 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3475.json | 38.0.0 |
| 2026-04-01T14:47:33.970269+00:00 | RedHat Importer | Affected by | VCID-zxjy-82n2-mkdb | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3474.json | 38.0.0 |
| 2026-04-01T14:47:33.935463+00:00 | RedHat Importer | Affected by | VCID-dsg5-s5y9-nbe3 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3473.json | 38.0.0 |