CVE-2018-1155 In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports featur...
MediumCVSS 5.4
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tenable SecurityCenter | = All versions prior to 5.7.0 | No fix listed |
| tenable Security Center | < 5.7.0 | 5.7.0 |
References
- www.tenable.com patch vendor-advisory
- 1041431 third-party-advisory vdb-entry