CVE-2018-1155

תיאור (מקור, אנגלית)

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

מדדים

EPSS — סבירות ניצול

1% (אחוזון 000) נכון ל-18/8/2026

CWE

CWE-79

מוצרים מושפעים

tenable: security center

קישורים

• https://www.tenable.com/security/tns-2018-11 PatchVendor Advisory
• https://www.tenable.com/security/tns-2018-11 PatchVendor Advisory
• http://www.securitytracker.com/id/1041431 Third Party AdvisoryVDB Entry
• http://www.securitytracker.com/id/1041431 Third Party AdvisoryVDB Entry