CVE-2014-125078: Horizon Project Horizon

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in yanheven console and classified as problematic. Affected by this issue is some unknown functionality of the file horizon/static/horizon/js/horizon.instances.js. The manipulation leads to cross site scripting. The attack may be launched remotely. The patch is identified as 32a7b713468161282f2ea01d5e2faff980d924cd. It is recommended to apply a patch to fix this issue. VDB-218354 is the identifier assigned to this vulnerability.

Affected products

• Horizon Project Horizon: before 2014-07-08 (fixed in 2014-07-08)

Published 2023-01-15. Last modified 2026-06-17.