Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2017-11506

Disclosure Date: August 09, 2017 (last updated November 26, 2024)
When linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could allow man-in-the-middle attacks.
0
0
Attacker Value
Unknown

CVE-2017-2122

Disclosure Date: May 12, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2017-7199

Disclosure Date: March 23, 2017 (last updated November 26, 2024)
Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode. Version 6.10.4 fixes this issue.
0
0
Attacker Value
Unknown

CVE-2016-9259

Disclosure Date: February 28, 2017 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
0