CVE-2017-2122

2017-05-1218:00:00

jpcert

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CNA Affected

[
  {
    "product": "Nessus",
    "vendor": "Tenable Network Security, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.8.0"
      },
      {
        "status": "affected",
        "version": "6.8.1"
      },
      {
        "status": "affected",
        "version": "6.9.0"
      },
      {
        "status": "affected",
        "version": "6.9.1"
      },
      {
        "status": "affected",
        "version": "6.9.2"
      }
    ]
  }
]