Skip to content
OpenAdvisories
Unscored CVE-2018-1155 EUVD-2018-11793GHSA-hq5r-7qq4-ph65

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript co…

Published Aug 2, 2018 · Updated Sep 17, 2024 · Assigned by tenable

Vendor: Tenable Product: SecurityCenter

Description

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

Affected products

VendorProductAffectedFixed
Tenable SecurityCenter All versions prior to 5.7.0 —

References