CVE-2018-1155: XSS
In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SecurityCenterto a version that resolves this vulnerability.Fixed in 5.7.0
Event History
Frequently Asked Questions
What is CVE-2018-1155?
CVE-2018-1155 is a cross-site scripting (XSS) vulnerability in SecurityCenter versions prior to 5.7.0.
How does CVE-2018-1155 vulnerability affect Tenable SecurityCenter?
The vulnerability affects Tenable SecurityCenter versions prior to 5.7.0.
What is the severity of CVE-2018-1155 vulnerability?
The severity of CVE-2018-1155 vulnerability is medium with a CVSS score of 5.4.
How can an attacker exploit CVE-2018-1155 vulnerability?
An authenticated attacker can exploit the vulnerability by injecting malicious JavaScript code into the Reports feature's image filename parameter.
Has Tenable released a fix for CVE-2018-1155 vulnerability?
Yes, Tenable has implemented updated input validation techniques in SecurityCenter version 5.7.0 to fix the vulnerability.