CVE-2019-3961: Tenable Nessus

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a users browser session.

Affected products

• Tenable Nessus: up to and including 8.4.0

Published 2019-06-25. Last modified 2026-06-17.