CVE-2019-3962

🗓️ 01 Jul 2019 20:15:11Reported by [email protected]Type

Content Injection vulnerability in Tenable Nessus prior to 8.5.0 may allow an authenticated, local attacker to exploit this vulnerability by convincing another targeted user to view a malicious URL and use Nessus to send fraudulent messages. Successful exploitation could allow the adversary to inject arbitrary text into the feed status, which will remain saved post session expiration

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2019-3962	1 Jul 201919:39	–	cve
Cvelist	CVE-2019-3962	1 Jul 201919:39	–	cvelist
EUVD	EUVD-2019-13569	7 Oct 202500:30	–	euvd
Tenable Nessus	Tenable Nessus < 8.5.0 Multiple Vulnerabilities (TNS-2019-04)	11 Jul 201900:00	–	nessus
OpenVAS	Tenable Nessus <= 8.4.0 Multiple XSS Vulnerabilities (TNS-2019-04)	26 Jun 201900:00	–	openvas
OSV	CVE-2019-3962	1 Jul 201920:15	–	osv
Prion	Code injection	1 Jul 201920:15	–	prion
RedhatCVE	CVE-2019-3962	22 May 202508:39	–	redhatcve