Описание
Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation techniques have been implemented to correct this issue.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:tenable:tenable.sc:5.14.0:*:*:*:*:*:*:*
cpe:2.3:a:tenable:tenable.sc:5.14.1:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00227
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation techniques have been implemented to correct this issue.
EPSS
Процентиль: 45%
0.00227
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79