Vendor/product archive

greenbone / greenbone_security_assistant CVEs

Beta · best-effort

4 CVEs tagged to greenbone / greenbone_security_assistant — 1 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to greenbone vendor archive

CVE-2019-25047

Published Jun 21, 2021

Greenbone Security Assistant (GSA) before 8.0.2 and Greenbone OS (GOS) before 5.0.10 allow XSS during 404 URL handling in gsad.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-25016

Published Jun 21, 2021

Greenbone Security Assistant (GSA) before 7.0.3 and Greenbone OS (GOS) before 5.0.0 allow Host Header Injection.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2016-1926

Published Jan 26, 2016

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2011-0650

Published Jan 28, 2011

Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests tha…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1