Back to Database
Status published
Medium
CVE-2016-1926
Cross-site scripting (XSS) vulnerability in the charts module in Greenbone...
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-1926
Credits & Attribution
No credits recorded in the NVD database.
References
- https://en.internetwache.org/cve-2016-1926-xss-in-the-greenbone-security-assistant-20-01-2016/
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183371.html
- http://www.greenbone.net/technology/gbsa2016-01.html
- http://www.openvas.org/OVSA20160113.html
- http://www.securityfocus.com/archive/1/537335/100/0/threaded
- http://packetstormsecurity.com/files/135328/OpenVAS-Greenbone-Security-Assistant-Cross-Site-Scripting.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184478.html
More from greenbone
View All →CVE-2019-25047
Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS)...
Medium
6.1
CVE-2018-25016
Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS)...
Critical
9.8
CVE-2011-0650
Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA)...
Medium
6.8
Affected Vendor
greenbone
View all reports →Affected Software
greenbone security assistant, greenbone os, fedora
Vulnerable Versions:
6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 3.1.1, 3.1.6, 3.1.7, 3.1.8, 3.1.9, 3.1.10, 3.1.11, 3.1.12, 3.1.13, 3.1.14, 3.1.15, 3.1.16, 3.1.17, 3.1.18, 3.1.19, 3.1.20, 3.1.21, 3.1.22, 3.1.23, 22, 23
Timeline
Official Publish:
January 26th, 2016
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.