CVE-2020-5737

{"id": "CVE-2020-5737", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2020-04-17T19:15:15.170", "references": [{"url": "https://www.tenable.com/security/tns-2020-02", "tags": ["Patch", "Vendor Advisory"], "source": "vulnreport@tenable.com"}, {"url": "https://www.tenable.com/security/tns-2020-02", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation techniques have been implemented to correct this issue."}, {"lang": "es", "value": "Una Vulnerabilidad de tipo XSS almacenado en Tenable.Sc versiones anteriores a 5.14.0, podr\u00eda permitir a un atacante remoto autentificado dise\u00f1ar una petici\u00f3n para ejecutar un c\u00f3digo script arbitrario en una sesi\u00f3n del navegador de un usuario. Se han implementado t\u00e9cnicas actualizadas de comprobaci\u00f3n de entrada para corregir este problema."}], "lastModified": "2024-11-21T05:34:30.617", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tenable:tenable.sc:5.14.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AEC4349D-D138-4EB5-AA72-616988F63DE2"}, {"criteria": "cpe:2.3:a:tenable:tenable.sc:5.14.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E49ABD5-084F-4CA5-8641-73C49C6A0DE3"}], "operator": "OR"}]}], "sourceIdentifier": "vulnreport@tenable.com"}