Approved changes feed: RSS · Atom

cpe:2.3:a:openstack:manila:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenstack (7b0cf974-b2b5-592e-bdf4-6953805ef02a)
ProductManila (9d3afbbb-a9ad-5ef1-bcf8-cbc3b183d1da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/openstack/manila purl2cpe 2026-06-01 10:17:03.340375
pkg:pypi/manila purl2cpe 2026-06-01 10:17:03.340379
pkg:rpm/opensuse/openstack-manila purl2cpe 2026-06-01 10:17:03.340382

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9543 vulnerable 2026-06-03 14:43:19.353784 Details available
OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attackers may also create resources, such as shared file systems and groups of shares on such share networks.
Published: 2020-03-12T16:40:20.000Z
Updated: 2024-08-04T10:34:38.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6519 vulnerable 2026-06-03 14:36:00.564607 Details available
Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create Share" form.
Published: 2017-04-21T15:00:00.000Z
Updated: 2024-08-06T01:29:20.320Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.