2017-02-27

2017-02-28

2017-03-01

All (2) Critical (3) High (7) Medium (2)

CVE-2016-9261 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in Tenable Log Correlation Engine (aka LCE) before 4.8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

XSS Log Correlation Engine

NVD

CVSS 3.1

5.4

EPSS

0.2%

CVE-2016-9259 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

XSS Nessus

NVD

CVSS 3.0

5.4

EPSS

0.2%