{"id":"CVE-2018-1155","state":"PUBLISHED","title":"In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter withi","description":"In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.","publishedAt":"2018-08-02T19:00:00.000Z","updatedAt":"2024-09-17T01:32:05.620Z","severity":null,"assigner":"tenable","products":["Tenable SecurityCenter"],"affected":[{"vendor":"Tenable","product":"SecurityCenter","versions":[{"version":"All versions prior to 5.7.0","status":"affected"}]}],"references":["https://www.tenable.com/security/tns-2018-11","http://www.securitytracker.com/id/1041431"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:36.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/1xxx/CVE-2018-1155.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-1155","state":"PUBLISHED","datePublished":"2018-08-02T19:00:00.000Z","dateUpdated":"2024-09-17T01:32:05.620Z","assignerShortName":"tenable","assignerOrgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be","dateReserved":"2017-12-05T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue."}],"affected":[{"vendor":"Tenable","product":"SecurityCenter","versions":[{"version":"All versions prior to 5.7.0","status":"affected"}]}],"references":[{"url":"https://www.tenable.com/security/tns-2018-11","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1041431","name":"1041431","tags":["vdb-entry","x_refsource_SECTRACK"]}],"problemTypes":[{"descriptions":[{"description":"Cross-Site Scripting (XSS)","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"tenable","dateUpdated":"2018-08-12T09:57:01.000Z","orgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be"},"datePublic":"2018-07-31T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vulnreport@tenable.com","DATE_PUBLIC":"2018-07-31T00:00:00","ID":"CVE-2018-1155","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SecurityCenter","version":{"version_data":[{"version_value":"All versions prior to 5.7.0"}]}}]},"vendor_name":"Tenable"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Cross-Site Scripting (XSS)"}]}]},"references":{"reference_data":[{"name":"https://www.tenable.com/security/tns-2018-11","refsource":"CONFIRM","url":"https://www.tenable.com/security/tns-2018-11"},{"name":"1041431","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1041431"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.tenable.com/security/tns-2018-11","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id/1041431","name":"1041431","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T03:51:48.853Z"}}]}}}