CVE-2013-5911
Low
No strong exploitation signal.
CVSS base
4.3
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS — probability of exploitation (30 days)
0.9%
59.1th percentile
CISA KEV
Not listed
Weakness / dates
CWE-79
Published 2013-09-24 · modified 2026-08-17
CVSS breakdown
AV:N/AC:M/Au:N/C:N/I:P/A:N
| Attack Vector | N | Network |
| Attack Complexity | M | Medium |
| Authentication | N | None |
| Confidentiality | N | None |
| Integrity | P | Partial |
| Availability | N | None |
Timeline
- 2013-09-24 — Published (NVD)
- 2026-08-17 — Last modified (NVD)
Description
Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter.