CVE-2018-1155
CVE-2018-1155
In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.
Affected products
Tenable · SecurityCenterWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →