Cross-Site Scripting Vulnerability in Nessus by Tenable
CVE-2014-7280

Currently unrated

Key Information:

Vendor: Tenable
Status: Web Ui
Vendor: CVE Published:; 21 October 2014

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 10%

What is CVE-2014-7280?

A Cross-Site Scripting vulnerability exists in the Web User Interface of Tenable Nessus 5.x versions prior to 2.3.4 Build #85. This flaw allows remote web servers to inject arbitrary web scripts or HTML content through crafted server headers. Successful exploitation could lead to various security risks, including the execution of malicious scripts in the user's browser, potentially compromising user credentials and session information. It is crucial for users of affected Nessus versions to apply available updates promptly to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2014-7280 - Proof of Concept