CVE-2024-0955

Summary

CVE-2024-0955 is a stored XSS vulnerability that affects the Nessus application. An authenticated, remote attacker with administrator privileges can exploit this vulnerability to alter Nessus proxy settings and execute remote arbitrary scripts. The vulnerability has a risk score of 32 out of 100 and is categorized as medium severity. It requires high privileges and user interaction to exploit and has a low impact on integrity and confidentiality. The vulnerability has an exploitability score of 1.7 out of 10 and is classified as a network attack vector. There is no availability impact associated with this vulnerability. The affected products include ZEzzbZ, ZEzzbY, ZEzzbb, j6yBfS, and many others. To remediate the vulnerability, it is recommended to apply the necessary security patches or updates provided by the vendor. Organizations should be aware of the potential dangers posed by this vulnerability, as it could lead to unauthorized access and execution of malicious code within their systems if exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.