Unrated severityNVD Advisory· Published Aug 2, 2018· Updated Sep 17, 2024
CVE-2018-1155
CVE-2018-1155
Description
In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.
Affected products
1- Range: All versions prior to 5.7.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securitytracker.com/id/1041431mitrevdb-entryx_refsource_SECTRACK
- www.tenable.com/security/tns-2018-11mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.