CVE-2017-11508

2017-11-0100:00:00

tenable

www.cve.org

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access.

CNA Affected

[
  {
    "product": "SecurityCenter",
    "vendor": "Tenable",
    "versions": [
      {
        "status": "affected",
        "version": "5.5.0, 5.5.1 and 5.5.2"
      }
    ]
  }
]