{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000548.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "Nessus scanning report in HTML format contains the target server\u0027s responses against Nessus scanning. Nessus fails to properly handle the responses. This may cause a script to be executed on a user\u0027s web browser when the user views the report.\r\n\r\nNessus, a vulnerability scanner from Tenable Network Security, Inc., is capable of providing test reports in HTML format. The report in HTML format contains the target server\u0027s responses against Nessus scanning. Nessus fails to properly handle the responses. This may cause a script to be executed on a user\u0027s web browser when the user views the report.",
  "link": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000548.html",
  "sec:cpe": {
    "#text": "cpe:/a:tenable:nessus",
    "@product": "Nessus",
    "@vendor": "Tenable, Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.7",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2007-000548",
  "sec:references": {
    "#text": "http://jvn.jp/en/jp/JVN34058672/index.html",
    "@id": "JVN#34058672",
    "@source": "JVN"
  },
  "title": "Nessus report function vulnerable to arbitrary script execution"
}