Openstack Manila vulnerabilities

2 CVEs affecting Openstack Manila, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9543, published 2020-03-12.

More from Openstack.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-6519, published 2017-04-21. Medium severity, CVSS 5.4. EPSS: 1.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in…
• CVE-2020-9543, published 2020-03-12. High severity, CVSS 8.3. EPSS: 1.3% chance of exploitation in the next 30 days. OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID.…