CVE-2016-1000029 in Nessus

Summary

Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would potentially impact other admins (Tenable IDs 5218 and 5269).

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

07/19/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
147843	Tenable Nessus UI Stored cross site scripting	79	Not defined	Official fix	CVE-2016-1000029
90196	Tenable Nessus Stored cross site scripting	80	Not defined	Official fix	CVE-2016-1000029
90195	Tenable Nessus Stored cross site scripting	80	Not defined	Official fix	CVE-2016-1000029

Sources

• MITRE
• NVD
• CVE Details