CVE-2018-1155: Tenable Security Center

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

Affected products

• Tenable Security Center: before 5.7.0 (fixed in 5.7.0)

Published 2018-08-02. Last modified 2026-08-17.