VULNERABILITY INTELLIGENCE

CVE-2024-0955

CVSS score4.8 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2024-02-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could lead to the execution of remote arbitrary scripts.

Weakness classification

  • vulnreport@tenable.com: CWE-20
  • nvd@nist.gov: CWE-79

Primary references