CVE-2016-4428

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Cross-site scripting (XSS) vulnerability in OpenStack Dashboard (Horizon) 8.0.1 and earlier and 9.0.0 through 9.0.1 allows remote authenticated users to inject arbitrary web script or HTML by injecting an AngularJS template in a dashboard form.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.debian.org/security/2016/dsa-3617Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/17/4Mailing List, Patch, Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1268Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1269Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1270Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1271Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1272Third Party Advisory
https://bugs.launchpad.net/horizon/+bug/1567673Issue Tracking, Third Party Advisory
https://review.openstack.org/329996Patch, Vendor Advisory
https://review.openstack.org/329997Patch, Vendor Advisory
https://review.openstack.org/329998Patch, Vendor Advisory
https://security.openstack.org/ossa/OSSA-2016-010.htmlPatch, Vendor Advisory
http://www.debian.org/security/2016/dsa-3617Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/06/17/4Mailing List, Patch, Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1268Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1269Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1270Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1271Third Party Advisory
https://access.redhat.com/errata/RHSA-2016:1272Third Party Advisory
https://bugs.launchpad.net/horizon/+bug/1567673Issue Tracking, Third Party Advisory
https://review.openstack.org/329996Patch, Vendor Advisory
https://review.openstack.org/329997Patch, Vendor Advisory
https://review.openstack.org/329998Patch, Vendor Advisory
https://security.openstack.org/ossa/OSSA-2016-010.htmlPatch, Vendor Advisory

Timeline

Published: Jul 12, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-44295.9Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) allows remote server CVE-2016-44308.8Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CS CVE-2016-44317.5Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks by le CVE-2016-44329.1The AMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication CVE-2016-44337.5Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a CVE-2016-44347.8Apache Tika before 1.13 does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML Ex CVE-2016-44359.0An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated client CVE-2016-44369.8Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name CVE-2016-44379.8Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbit CVE-2016-44389.8The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.CVE-2016-44396.7The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer l CVE-2016-44407.8arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MS