CVE-2019-3923

Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input. An authenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a user's browser session. Tenable has released Nessus 8.2.2 to address this issue.

• CWE-79

• https://www.tenable.com/security/tns-2019-01Vendor Advisory
• https://www.tenable.com/security/tns-2019-01Vendor Advisory

Published

Feb 12, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3917The Alcatel Lucent I-240W-Q GPON ONT using firmware version …7.5
• CVE-2019-3918The Alcatel Lucent I-240W-Q GPON ONT using firmware version …9.8
• CVE-2019-3919The Alcatel Lucent I-240W-Q GPON ONT using firmware version …8.8
• CVE-2019-3920The Alcatel Lucent I-240W-Q GPON ONT using firmware version …8.8
• CVE-2019-3921The Alcatel Lucent I-240W-Q GPON ONT using firmware version …8.8
• CVE-2019-3922The Alcatel Lucent I-240W-Q GPON ONT using firmware version …9.8
• CVE-2019-3924MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-…7.5
• CVE-2019-3925Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…9.8
• CVE-2019-3926Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…9.8
• CVE-2019-3927Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…9.8
• CVE-2019-3928Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmwa…5.3
• CVE-2019-3929The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmwa…9.8