CVE-2018-1155 Vulnerability Details

  /     /     /  

CVE-2018-1155 Metadata Quick Info

CVE Published: 02/08/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: tenable | Vendor: Tenable | Product: SecurityCenter
Status : PUBLISHED

---

CVE-2018-1155 Description

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Cross-Site Scripting (XSS)
Source: Tenable

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).