CVE-2016-1926

Source
https://cve.org/CVERecord?id=CVE-2016-1926
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1926.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-1926
Published
2016-01-26T19:59:09.500Z
Modified
2026-07-08T05:47:57.224397620Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp.

Database specific
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
                "cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "22"
                },
                {
                    "last_affected": "22"
                },
                {
                    "introduced": "23"
                },
                {
                    "last_affected": "23"
                }
            ],
            "vendor_product": "fedoraproject:fedora",
            "source": "CPE_STRING"
        },
        {
            "cpes": [
                "cpe:2.3:o:greenbone:greenbone_os:3.1.10:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.11:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.12:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.13:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.14:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.15:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.16:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.17:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.18:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.19:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.1:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.20:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.21:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.22:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.23:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.6:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.7:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.8:*:*:*:*:*:*:*",
                "cpe:2.3:o:greenbone:greenbone_os:3.1.9:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "3.1.1"
                },
                {
                    "last_affected": "3.1.1"
                },
                {
                    "introduced": "3.1.6"
                },
                {
                    "last_affected": "3.1.6"
                },
                {
                    "introduced": "3.1.7"
                },
                {
                    "last_affected": "3.1.7"
                },
                {
                    "introduced": "3.1.8"
                },
                {
                    "last_affected": "3.1.8"
                },
                {
                    "introduced": "3.1.9"
                },
                {
                    "last_affected": "3.1.9"
                },
                {
                    "introduced": "3.1.10"
                },
                {
                    "last_affected": "3.1.10"
                },
                {
                    "introduced": "3.1.11"
                },
                {
                    "last_affected": "3.1.11"
                },
                {
                    "introduced": "3.1.12"
                },
                {
                    "last_affected": "3.1.12"
                },
                {
                    "introduced": "3.1.13"
                },
                {
                    "last_affected": "3.1.13"
                },
                {
                    "introduced": "3.1.14"
                },
                {
                    "last_affected": "3.1.14"
                },
                {
                    "introduced": "3.1.15"
                },
                {
                    "last_affected": "3.1.15"
                },
                {
                    "introduced": "3.1.16"
                },
                {
                    "last_affected": "3.1.16"
                },
                {
                    "introduced": "3.1.17"
                },
                {
                    "last_affected": "3.1.17"
                },
                {
                    "introduced": "3.1.18"
                },
                {
                    "last_affected": "3.1.18"
                },
                {
                    "introduced": "3.1.19"
                },
                {
                    "last_affected": "3.1.19"
                },
                {
                    "introduced": "3.1.20"
                },
                {
                    "last_affected": "3.1.20"
                },
                {
                    "introduced": "3.1.21"
                },
                {
                    "last_affected": "3.1.21"
                },
                {
                    "introduced": "3.1.22"
                },
                {
                    "last_affected": "3.1.22"
                },
                {
                    "introduced": "3.1.23"
                },
                {
                    "last_affected": "3.1.23"
                }
            ],
            "vendor_product": "greenbone:greenbone_os",
            "source": "CPE_STRING"
        }
    ]
}
References

Affected packages

Git / github.com/greenbone/gsa

Affected ranges

Type
GIT
Repo
https://github.com/greenbone/gsa
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.7:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "last_affected": "6.0.0"
        },
        {
            "introduced": "6.0.1"
        },
        {
            "last_affected": "6.0.1"
        },
        {
            "introduced": "6.0.2"
        },
        {
            "last_affected": "6.0.2"
        },
        {
            "introduced": "6.0.3"
        },
        {
            "last_affected": "6.0.3"
        },
        {
            "introduced": "6.0.4"
        },
        {
            "last_affected": "6.0.4"
        },
        {
            "introduced": "6.0.5"
        },
        {
            "last_affected": "6.0.5"
        },
        {
            "introduced": "6.0.6"
        },
        {
            "last_affected": "6.0.6"
        },
        {
            "introduced": "6.0.7"
        },
        {
            "last_affected": "6.0.7"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

6.*
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
6.0.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1926.json"