Product by OpenStack

OpenStack Horizon

24 known vulnerabilities in OpenStack Horizon (OpenStack), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in OpenStack Horizon (OpenStack)

Medium	CVE-2016-4428	Red Hat OpenStack: Cross-Site Scripting (XSS) also in 2 other products	5.4	12.07.2016
Medium	CVE-2020-29565	OpenStack Horizon: security vulnerability also in 1 other product	6.1	04.12.2020
Not rated	CVE-2015-3219	OpenStack Horizon: Cross-Site Scripting (XSS) also in 2 other products	—	20.08.2015
Not rated	CVE-2014-8124	OpenStack Horizon: Denial of Service also in 3 other products	—	12.12.2014
Not rated	CVE-2012-3540	OpenStack Horizon: Open Redirect	—	05.09.2012
Medium	CVE-2022-45582	OpenStack Horizon: Open Redirect	6.1	22.08.2023
Not rated	CVE-2012-3542	OpenStack Compute (Essex): Open Redirect also in 1 other product	—	05.09.2012
Medium	CVE-2017-7400	OpenStack Horizon: Cross-Site Scripting (XSS)	4.8	03.04.2017
Not rated	CVE-2012-2094	OpenStack Horizon: Cross-Site Scripting (XSS)	—	05.06.2012
Not rated	CVE-2012-3426	OpenStack Keystone: security vulnerability also in 2 other products	—	31.07.2012
Medium	CVE-2026-55748	OpenStack Horizon: OS Command Injection	6.8	17.06.2026
Not rated	CVE-2012-2144	OpenStack Horizon: Session Fixation	—	05.06.2012
Not rated	CVE-2014-3594	OpenStack Horizon: Cross-Site Scripting (XSS) also in 1 other product	—	22.08.2014
Not rated	CVE-2014-3474	OpenStack Horizon: Cross-Site Scripting (XSS) also in 1 other product	—	31.10.2014
Medium	CVE-2026-43002	OpenStack Horizon: Incorrect Behavior Order	5.3	05.05.2026
Not rated	CVE-2015-3988	OpenStack Horizon: Cross-Site Scripting (XSS) also in 1 other product	—	19.05.2015
Not rated	CVE-2013-6858	OpenStack Horizon: Cross-Site Scripting (XSS) also in 2 other products	—	23.11.2013
Not rated	CVE-2014-3473	OpenStack Horizon: Cross-Site Scripting (XSS) also in 1 other product	—	31.10.2014
Not rated	CVE-2014-3475	OpenStack Horizon: Cross-Site Scripting (XSS) also in 1 other product	—	31.10.2014
Not rated	CVE-2014-0157	OpenStack Horizon: Cross-Site Scripting (XSS) also in 1 other product	—	15.04.2014
Not rated	CVE-2013-4471	OpenStack Horizon: security vulnerability	—	14.05.2014
Medium	CVE-2012-5476	Openstack-dashboard: security vulnerability also in 1 other product	5.5	30.12.2019
Not rated	CVE-2014-8578	OpenStack Horizon: Cross-Site Scripting (XSS)	—	31.10.2014
Medium	CVE-2012-5474	Python-django-horizon: security vulnerability also in 3 other products	5.5	30.12.2019

All products by OpenStack

Key figures

Vulnerabilities