CVE-2019-3962

CVE-2019-3962 describes a content injection vulnerability in Tenable Nessus versions prior to 8.5.0. An authenticated, local attacker could exploit this by tricking another Nessus user into viewing a malicious URL, allowing the attacker to inject arbitrary text into the feed status that persists even after the session ends. The vulnerability has a low CVSS score of 3.3, indicating low attack complexity and impact, with no confidentiality or availability impact, but a low integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.