CVE-2016-9261 :- LCE 4.8.1 Fixes Stored XSS Vulnerability

 

LCE 4.8.1 Fixes Multiple Vulnerabilities










Critical

Description

Cross-site scripting (XSS) vulnerability in Tenable Log Correlation Engine (aka LCE) before 4.8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

https://www.tenable.com/security/tns-2016-18

Comments