Stored Cross-Site Scripting Vulnerability in Tenable Security Center
CVE-2024-1891

5.4MEDIUM

Key Information:

Vendor

Tenable

Status
Security Center
Vendor
CVE Published:
12 June 2024

What is CVE-2024-1891?

In Tenable Security Center, an authenticated remote attacker can exploit a stored cross-site scripting vulnerability by injecting malicious HTML code into the results of a web application scan. This vulnerability can lead to unauthorized access and manipulation of web application content, potentially compromising user data and application integrity.

References

https://www.tenable.com/security/tns-2024-10

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.