CVE-2024-9158

XSS PUBLISHED

Description (CNA)

A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI.

Affected (CNA)

Vendor / product	Versions
Tenable / Nessus Network Monitor	affected 0 before 6.5.0

CWE

CWE-79

References

https://www.tenable.com/security/tns-2024-17

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.