PT-2020-18659 · Tenable · Tenable.Sc

Mateusz Dabrowski · Published 2020-04-17 · Updated 2020-04-23 · CVE-2020-5737

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tenable.Sc versions prior to 5.14.0

Description The issue allows an authenticated remote attacker to execute arbitrary script code in a user's browser session through a stored XSS attack. Updated input validation techniques have been implemented to correct this issue.

Recommendations For versions prior to 5.14.0, update to version 5.14.0 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-5737

Affected Products

Tenable.Sc

References · 3

• https://tenable.com/security/tns-2020-02 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5737 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5737 · Vendor Advisory