Medium severity6.1NVD Advisory· Published Jan 26, 2016· Updated May 6, 2026
CVE-2016-1926
CVE-2016-1926
Description
Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp.
Affected products
29cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.7:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
cpe:2.3:o:greenbone:greenbone_os:3.1.1:*:*:*:*:*:*:*+ 18 more
- cpe:2.3:o:greenbone:greenbone_os:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.10:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.11:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.12:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.13:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.14:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.15:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.16:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.17:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.18:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.19:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.20:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.21:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.22:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.23:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.6:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.7:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.8:*:*:*:*:*:*:*
- cpe:2.3:o:greenbone:greenbone_os:3.1.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- en.internetwache.org/cve-2016-1926-xss-in-the-greenbone-security-assistant-20-01-2016/nvdExploitThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2016-May/183371.htmlnvdThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2016-May/184478.htmlnvdThird Party Advisory
- packetstormsecurity.com/files/135328/OpenVAS-Greenbone-Security-Assistant-Cross-Site-Scripting.htmlnvdThird Party Advisory
- www.greenbone.net/technology/gbsa2016-01.htmlnvdBroken LinkVendor Advisory
- www.openvas.org/OVSA20160113.htmlnvdThird Party Advisory
- www.securityfocus.com/archive/1/537335/100/0/threadednvd
News mentions
0No linked articles in our index yet.