CVE-2025-56535 - A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter

Back Back to CVE browser

MEDIUM

A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter

Published Apr 29, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.18%

Description

A cross-site scripting (XSS) vulnerability in opennebula v6.10.0.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the zone attribute parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209588
Advisory
https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56535
exploitThird Party Advisory
https://opennebula.io/opennebula-7/
Product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209588		Advisory
https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56535		exploitThird Party Advisory
https://opennebula.io/opennebula-7/		Product