Unscored severity · published Sep 24, 2013
CVE-2013-5911
Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Security Center · Tenable
4.6; 4.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5911
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5911
www.osvdb.org
http://www.osvdb.org/97584
Vendor Advisory
https://discussions.nessus.org/message/22174#22174
More from Security Center
9.9
CVE-2026-19682
Command Injection
9.9
CVE-2026-19681
Command Injection
9.9
CVE-2026-19626
Remote Code Execution
9.9
CVE-2026-64879
Command Injection
9.9
CVE-2026-64878
Command Injection