CVE-2010-2914 - Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Published Jul 30, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 1.64%

Description

Cross-site scripting (XSS) vulnerability in nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://secunia.com/advisories/40722
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/archive/1/512645/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1024248
vdb-entryx_refsource_SECTRACK
https://discussions.nessus.org/message/7245#7245
x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2918
Advisory

Link	Providers	Tags
http://secunia.com/advisories/40722		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/archive/1/512645/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securitytracker.com/id?1024248		vdb-entryx_refsource_SECTRACK
https://discussions.nessus.org/message/7245#7245		x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2918		Advisory