Lucene search
HistoryFeb 07, 2024 - 12:15 a.m.
CVE-2024-0971
sql injection
altering content
authenticated attacker
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
18.8%
A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content.
Affected configurations
Node
tenablenessusRange<10.7.0
References
Related
vulnrichment
vulnrichment
CVE-2024-0971
2024-02-06 23:38:32
cve
cve
CVE-2024-0971
2024-02-07 00:15:55
cvelist
cvelist
CVE-2024-0971
2024-02-06 23:38:32
prion
prion
Sql injection
2024-02-07 00:15:00
tenable
tenable
[R1] Nessus Version 10.7.0 Fixes Multiple Vulnerabilities
2024-02-06 16:07:31
openvas
openvas
Tenable Nessus Multiple Vulnerabilities (TNS-2024-01)
2024-02-07 00:00:00
nessus
nessus
Tenable Nessus < 10.7.0 Multiple Vulnerabilities (TNS-2024-01)
2024-02-07 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
AI Score
6.8
Confidence
High
EPSS
0.001
Percentile
18.8%
Related for NVD:CVE-2024-0971