CVE-2017-1000065: Openmediavault

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management(Users) functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser.

Affected products

• Openmediavault Openmediavault: version 2.1 only

Published 2017-07-17. Last modified 2026-06-17.