VulnSea

horizon has 7 CVEs on record between 2022 and 2026. The median CVSS is 5.4 (medium). None have a confirmed exploitation report.

CVEs per month

Last 12 months, by publish date

101112010203040506070809
Exploited share
0% vs 1% corpus
Median CVSS
5.4
Publish → KEV
—
Last 90 days
0 prev 1

Weakness classes

Products

  • horizon 7
Follow horizon:RSS feedSave a search →Embed badge ↗
7
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

horizon vulnerabilities

CVEs affecting horizon, newest first. Open any entry for full detail, references, and exploit status.

7 CVEsRSS

CVE-2026-55748Medium· 6.0
3mo ago

OpenStack Horizon RC file generation does not escape special characters in project names

OpenStack Horizon RC file generation does not escape special characters in project names

▾ Sunlithorizon · horizonEPSS 0.22%via OSV
CVE-2014-0157Medium
4y ago

OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting

OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting

▾ Sunlithorizon · horizonEPSS 1.2%via OSV
CVE-2017-7400Medium· 4.8
4y ago

OpenStack Horizon Cross-site Scripting (XSS)

OpenStack Horizon Cross-site Scripting (XSS)

▾ Sunlithorizon · horizonEPSS 1.3%via OSV
CVE-2014-3474Low
4y ago

OpenStack Horizon Cross-site scripting (XSS) vulnerability

OpenStack Horizon Cross-site scripting (XSS) vulnerability

▾ Sunlithorizon · horizonEPSS 1.9%via OSV
CVE-2016-4428Medium· 5.4
4y ago

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability

▾ Sunlithorizon · horizonEPSS 2.1%via OSV
CVE-2014-3473Medium
4y ago

Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

▾ Sunlithorizon · horizonEPSS 1.7%via OSV
CVE-2014-3594Low
4y ago

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability in the Host Aggregates interface

▾ Sunlithorizon · horizonEPSS 2.1%via OSV
horizon vulnerabilities (CVEs) · VulnSea