NN
Product
Nessus Network Monitor
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 4Low 0
Watch
Add Nessus Network Monitor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3711 | 9.8 | Aug 24 | SM2 Decryption Buffer Overflow Affected: through 5.13.1 |
| CVE-2023-5622 | 8.8 | Oct 26 | Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted… Affected: before 6.3.0 |
| CVE-2025-24917 | 7.8 | May 23 | In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with… Affected: before 6.5.1 |
| CVE-2025-24916 | 7.8 | May 23 | When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for… Affected: before 6.5.1 |
| CVE-2023-5623 | 7.8 | Oct 26 | NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a… Affected: before 6.3.0 |
| CVE-2020-5794 | 7.8 | Nov 6 | A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying… Affected: 5.11.0; 5.11.1; 5.12.0 |
| CVE-2021-23840 | 7.5 | Feb 16 | Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable… Affected: 5.11.0; 5.11.1; 5.12.0; 5.12.1; 5.13.0 |
| CVE-2021-3712 | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: before 6.0.0 |
| CVE-2021-3450 | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT Affected: 5.11.0; 5.11.1; 5.12.0; 5.12.1; 5.13.0 |
| CVE-2023-5624 | 7.2 | Oct 26 | Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation Affected: before 6.3.0 |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: 5.11.0; 5.11.1; 5.12.0; 5.12.1; 5.13.0 |
| CVE-2021-23841 | 5.9 | Feb 16 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509… Affected: 5.11.0; 5.11.1; 5.12.0; 5.12.1; 5.13.0 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: before 5.13.1 |
| CVE-2024-9158 | 4.6 | Sep 30 | A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the… Affected: before 6.5.0 |
Showing 14