In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports featu…

Medium CVSS 5.4

CVECVE-2018-1155

First seen2026-08-17 15:15 UTC

Disclosed2018-08-02 19:29 UTC

Last updated2026-08-17 15:15 UTC

Channel statusauto

Summary

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

http://www.securitytracker.com/id/1041431 Third Party Advisory
https://www.tenable.com/security/tns-2018-11 Patch
http://www.securitytracker.com/id/1041431 Third Party Advisory
https://www.tenable.com/security/tns-2018-11 Patch

Timeline

2026-08-17 nvd_ingest NVD