VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Aug 2, 2018· Updated Jun 17, 2026

CVE-2018-1155

CVE-2018-1155

Description

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Tenable/Securitycenterllm-fuzzy2 versions
    <5.7.0+ 1 more
    • (no CPE)range: <5.7.0
    • (no CPE)range: All versions prior to 5.7.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.