CVE-2025-36625CWE-117

Log Poisoning in Nessus

Medium · published April 18, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00293 · 20.8th percentile
Weakness
CWE-117 · Improper Output Neutralization for Logs
Published
2025-04-18T19:17Z
EPSS history
Timeline
  • 18 APR 19:17Z
    Log Poisoning in Nessus
    cvelistv5