CVE-2019-3961 - Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input

Back Back to CVE browser

MEDIUM

Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input

Published Jun 25, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.48%

Description

Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a users browser session.

Affected products

Vendor Tenable Product Tenable Nessus Default
n/a
- Version
  All versions prior to 8.5.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenable

Tenable Nessus

n/a

Version	Status	Constraints
All versions prior to 8.5.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://www.securityfocus.com/bid/108892
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.tenable.com/security/tns-2019-04
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/108892		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.tenable.com/security/tns-2019-04		x_refsource_CONFIRMThird Party Advisory