CVE-2016-1926

Published: Jan 26, 2016Modified: May 6, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp.

Affected (29)

Products: Greenbone: Greenbone Security Assistant, Greenbone Os · Fedoraproject: Fedora

Greenbone

2 products

Greenbone Security Assistant

Greenbone Os

Fedoraproject

1 product

Fedora

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Greenbone Greenbone Security Assistant	Version 6.0.0
Greenbone Greenbone Security Assistant	Version 6.0.1
Greenbone Greenbone Security Assistant	Version 6.0.2
Greenbone Greenbone Security Assistant	Version 6.0.3
Greenbone Greenbone Security Assistant	Version 6.0.4
Greenbone Greenbone Security Assistant	Version 6.0.5
Greenbone Greenbone Security Assistant	Version 6.0.6
Greenbone Greenbone Security Assistant	Version 6.0.7

Configuration B

19 vulnerable

Vulnerable Software	Affected Versions
Greenbone Greenbone Os	Version 3.1.10
Greenbone Greenbone Os	Version 3.1.11
Greenbone Greenbone Os	Version 3.1.12
Greenbone Greenbone Os	Version 3.1.13
Greenbone Greenbone Os	Version 3.1.14
Greenbone Greenbone Os	Version 3.1.15
Greenbone Greenbone Os	Version 3.1.16
Greenbone Greenbone Os	Version 3.1.17
Greenbone Greenbone Os	Version 3.1.18
Greenbone Greenbone Os	Version 3.1.19
Greenbone Greenbone Os	Version 3.1.1
Greenbone Greenbone Os	Version 3.1.20
Greenbone Greenbone Os	Version 3.1.21
Greenbone Greenbone Os	Version 3.1.22
Greenbone Greenbone Os	Version 3.1.23
Greenbone Greenbone Os	Version 3.1.6
Greenbone Greenbone Os	Version 3.1.7
Greenbone Greenbone Os	Version 3.1.8
Greenbone Greenbone Os	Version 3.1.9