CVE-2024-9158

Description

A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI.

Reserved 2024-09-24 | Published 2024-09-30 | Updated 2024-09-30 | Assigner tenable

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status
affected

Any version before 6.5.0
affected

References

www.tenable.com/security/tns-2024-17

cve.org (CVE-2024-9158)

nvd.nist.gov (CVE-2024-9158)

Download JSON