Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a host.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tenable.sc 输入验证错误漏洞
Vulnerability Description
Tenable Network Security Tenable.Sc是美国Tenable Network Security公司的一套漏洞分析解决方案。该产品支持实时漏洞评估和管理等。 Tenable.sc 6.0.0 之前版本存在安全漏洞，该漏洞源于在将用户提供的输入返回给用户之前对其进行了不正确的验证，攻击者利用该漏洞可以利用报告系统导出包含公式的报告，并在主机上执行。
CVSS Information
N/A
Vulnerability Type
N/A