CVE-2018-1155

2018-07-3100:00:00

tenable

www.cve.org

0.001 Low

EPSS

Percentile

21.6%

JSON

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

CNA Affected

[
  {
    "product": "SecurityCenter",
    "vendor": "Tenable",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 5.7.0"
      }
    ]
  }
]

References

www.securitytracker.com/id/1041431

www.tenable.com/security/tns-2018-11

0.001 Low

EPSS

Percentile

21.6%

JSON

Related for CVELIST:CVE-2018-1155