Описание
A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.12.1 (исключая)
cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.00448
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 5.3
github
2 месяца назад
A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
EPSS
Процентиль: 37%
0.00448
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-89