Not rated
CVE-2020-5765 Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during…
Description
Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during scan configuration. An authenticated, remote attacker could potentially exploit this vulnerability to execute arbitrary code in a user's session. Tenable has implemented additional input validation mechanisms to correct this issue in Nessus 8.11.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tenable Nessus 8.11 | earliest → < 8.11.0 | 8.11.0 |
Other CVEs of Tenable Nessus
The 5 CVEs of Tenable Nessus →
CVE-2022-3499
An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a…
6.5
Medium
CVE-2020-5774
Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios
Not rated
CVE-2019-3982
Nessus versions 8.6.0 and earlier were found to contain a Denial of Service vulnerability due to improper validation…
Not rated
CVE-2019-3974
Nessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system files could be…
Not rated