CVE-2024-0955 in Nessus

Sumário

de MITRE • 07/02/2024

A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could lead to the execution of remote arbitrary scripts.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsável: Tenable Network Security, Inc.
• Reservar: 26/01/2024
• Divulgação: 07/02/2024
• Moderação: aceite
• Entrada: VDB-253079
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.8 (CNA)
• EPSS: 0.00561
• KEV: não
• Atividades: muito baixo
• Sector: Government, Finance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-0955
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-0955
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-0955/