CVE-2018-1142 Vulnerability Details

Record summary

CVE-2018-1142 has a selected CVSS score of 5.4 (medium).

Description

Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability. Utilizing a specially crafted request, an authenticated attacker could potentially execute arbitrary JavaScript code by manipulating certain URL parameters related to offline plugins.

Description source: CVE List

Affected products and versions

Product	Source	Version range	Status
Tenable Appliance Browse Tenable / Tenable Appliance	CVE List	Tenable Appliance versions	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2018-1142

tenable.comConfirmation

https://www.tenable.com/security/tns-2018-02