Cross site scripting

2018-08-0219:29:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

CPENameOperatorVersion
securitycenterlt5.7.0

CPE	Name	Operator	Version
	securitycenter	lt	5.7.0

References

www.securitytracker.com/id/1041431

www.tenable.com/security/tns-2018-11