Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-7280

No fix known EPSS 3%

Cross-site scripting (XSS) vulnerability in the Web UI before 2.3.4 Build #85 for Tenable Nessus 5.x allows remote web servers to inject arbitrary web script or HTML via the server header.

Published 2014-10-21 · CVE record · OSV

Products: tenable web_ui