CVE-2018-1142

Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability. Utilizing a specially crafted request, an authenticated attacker could potentially execute arbitrary JavaScript code by manipulating certain URL parameters related to offline plugins.

Score

CVSS 3.0 5.4 Medium

Status

Modified - vulnreport@tenable.com

Published

2018-03-28

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Appliance (Tenable)
• Tenable Appliance (Tenable)

References

• https://www.tenable.com/security/tns-2018-02