CVE-2015-3988

Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.

View graph Watch Export

CVSS v3.1

—

EPSS

1.79%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

EPSS Trend

Aug 16, 2026 → Aug 31, 2026

▼ 0.01pp

1.80% → 1.79% over 2 tracked changes

Connections

3 relationships

CWE-79

source

Timeline

disclosure → media coverage

May 19, 2015

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026