CVE-2019-3923

MEDIUM 5.4CVE-2019-3923 · Published 12/02/2019 · updated 17/06/2026

In short

CVE-2019-3923 is a MEDIUM (CVSS 5.4) vulnerability affecting nessus (tenable).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
nessus tenable	`≤ 8.2.1`	No fix yet

Description

Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input. An authenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a user's browser session. Tenable has released Nessus 8.2.2 to address this issue.

References

tenable.com/security/tns-2019-01 · Vendor Advisory

More vulnerabilities in nessus

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nessus

tenable

≤ 8.2.1

No fix yet

Description

More vulnerabilities in nessus

See all →