What’s Vulnerable › Vulnerabilities

CVE-2018-1142

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-28 · updated 2026-06-17
• Weakness: CWE-79

Description

Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability. Utilizing a specially crafted request, an authenticated attacker could potentially execute arbitrary JavaScript code by manipulating certain URL parameters related to offline plugins.

Affected products

• Tenable Appliance: through 4.6.1

References

• https://www.tenable.com/security/tns-2018-02
• https://www.tenable.com/security/tns-2018-02

Get alerted when CVE-2018-1142 or the next vulnerability affects your stack