CVE-2013-5911: Tenable Security Center

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter.

Affected products

• Tenable Security Center: version 4.6 only; version 4.7 only

Published 2013-09-24. Last modified 2026-08-17.