Greenbone

Greenbone Security Assistant

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2018-25016

  • EPSS 0.51%
  • Published 21.06.2021 15:15:07
  • Last modified 21.11.2024 04:03:21

Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.

6.1

CVE-2019-25047

Exploit
  • EPSS 0.31%
  • Published 21.06.2021 15:15:07
  • Last modified 21.11.2024 04:39:49

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.

6.1

CVE-2016-1926

Exploit
  • EPSS 0.72%
  • Published 26.01.2016 19:59:09
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp.

6.8

CVE-2011-0650

  • EPSS 0.07%
  • Published 28.01.2011 16:00:04
  • Last modified 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue c...