TI-2018-01058 CVE-2018-1142 · GHSA-9qrj-ww3w-jxgp
Cross-site scripting in Tenable Appliance
Priority LOW 25
Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability.
4 records
Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability.
Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI.
Tenable Appliance 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for the unauthorized manipulation of the admin password.
Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authenticated attacker to upload a crafted file that could be written to anywhere on th…