CVE-2019-3923 - Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input · CoreCVE

Back Back to CVE browser

MEDIUM

Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input

Published Feb 12, 2019

5.4

MEDIUM

CVSS 3.0

EPSS 0.88%

Description

Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input. An authenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a user's browser session. Tenable has released Nessus 8.2.2 to address this issue.

Affected products

Vendor Tenable Product Tenable Nessus Default
n/a
- Version
  All versions prior to 8.2.2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
All versions prior to 8.2.2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://www.tenable.com/security/tns-2019-01
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://www.tenable.com/security/tns-2019-01		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner tenable

Published Feb 12, 2019

Updated Sep 17, 2024

Reserved Jan 3, 2019

Link CVE-2019-3923

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-3923

Severity n/a

Public date n/a

Links CVE-2019-3923