Vulnerabilities

TI-2019-15187 CVE-2019-25047 · GHSA-2jh2-4x98-cv5j

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10…

LOW 29

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01114 Published 2021-06-21 No fix listed CWE-79

TI-2018-15243 CVE-2018-25016 · GHSA-w8jh-wm6j-74gc

Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.

MEDIUM 45

Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01276 Published 2021-06-21 No fix listed CWE-74

TI-2016-01763 CVE-2016-1926 · GHSA-m58f-5mcm-c967

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security…

LOW 31

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a ge…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01619 Published 2016-01-26 No fix listed CWE-79

Vulnerabilities

Filters

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10…

Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security…