CVE-2016-1926 Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_ty...
MediumCVSS 6.1
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| greenbone security assistant | = 6.0.0 | No fix listed |
| greenbone security assistant | = 6.0.1 | No fix listed |
| greenbone security assistant | = 6.0.2 | No fix listed |
| greenbone security assistant | = 6.0.3 | No fix listed |
| greenbone security assistant | = 6.0.4 | No fix listed |
| greenbone security assistant | = 6.0.5 | No fix listed |
| greenbone security assistant | = 6.0.6 | No fix listed |
| greenbone security assistant | = 6.0.7 | No fix listed |
| Greenbone OS | = 3.1.1 | No fix listed |
| Greenbone OS | = 3.1.6 | No fix listed |
| Greenbone OS | = 3.1.7 | No fix listed |
| Greenbone OS | = 3.1.8 | No fix listed |
| Greenbone OS | = 3.1.9 | No fix listed |
| Greenbone OS | = 3.1.10 | No fix listed |
| Greenbone OS | = 3.1.11 | No fix listed |
| Greenbone OS | = 3.1.12 | No fix listed |
| Greenbone OS | = 3.1.13 | No fix listed |
| Greenbone OS | = 3.1.14 | No fix listed |
| Greenbone OS | = 3.1.15 | No fix listed |
| Greenbone OS | = 3.1.16 | No fix listed |
| Greenbone OS | = 3.1.17 | No fix listed |
| Greenbone OS | = 3.1.18 | No fix listed |
| Greenbone OS | = 3.1.19 | No fix listed |
| Greenbone OS | = 3.1.20 | No fix listed |
| Greenbone OS | = 3.1.21 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Greenbone OS | = 3.1.22 | No fix listed |
| Greenbone OS | = 3.1.23 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
| fedoraproject fedora | = 23 | No fix listed |
References
- FEDORA-2016-afdedc8da9 third-party-advisory vendor-advisory
- FEDORA-2016-9851b69dbb third-party-advisory vendor-advisory
- packetstormsecurity.com third-party-advisory
- www.greenbone.net broken-link vendor-advisory
- www.openvas.org third-party-advisory
- 20160120 [CVE-2016-1926] XSS in Greenbone Security Assistant ≥ 6.0.0 and < 6.0.8 mailing-list
- en.internetwache.org exploit third-party-advisory