Test ID:	1.3.6.1.4.1.25623.1.0.126618
Category:	General
Title:	Tenable Nessus Multiple Vulnerabilities (TNS-2024-01)
Summary:	Tenable Nessus is prone to multiple vulnerabilities.
Description:	Summary: Tenable Nessus is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-0955: A stored XSS exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could lead to the execution of remote arbitrary scripts. - CVE-2024-0971: An SQL injection exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content. Affected Software/OS: Tenable Nessus prior to version 10.7.0. Solution: Update to version 10.7.0 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:C/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-0955 https://www.tenable.com/security/tns-2024-01 Common Vulnerability Exposure (CVE) ID: CVE-2024-0971
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.