← Back

Web Ui

web_ui

Vendor: Tenable • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-7280
1Tenable
1Web Ui
May 6, 2026
Oct 21, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Web UI before 2.3.4 Build #85 for Tenable Nessus 5.x allows remote web servers to inject arbitrary web script or HTML via the server header.
CVE-2014-4980
1Tenable
2Nessus
Web Ui
May 6, 2026
Jul 23, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter.