NE
Product
Nessus
68
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 26Medium 34Low 2
Watch
Add Nessus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5765 | 5.4 | Jul 15 | Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during scan configuration Affected: through 8.10.0 |
| CVE-2019-3923 | 5.4 | Feb 12 | Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input Affected: through 8.2.1 |
| CVE-2018-1147 | 5.4 | May 18 | In Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation Affected: before 7.1.0 |
| CVE-2017-2122 | 5.4 | May 12 | Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated attackers to inject arbitrary web script or HTML via… Affected: 6.8.0; 6.8.1; 6.9.0; 6.9.1; 6.9.2 |
| CVE-2016-9259 | 5.4 | Feb 28 | Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors Affected: 6.8; 6.8.1; 6.8.2; 6.9 |
| CVE-2016-9260 | 5.4 | Jan 31 | Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to handling of… Affected: through 6.8.1 |
| CVE-2017-5179 | 5.4 | Jan 5 | Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors Affected: through 6.9.2 |
| CVE-2026-57587 | 5.3 | Jun 25 | SQL Injection in Nessus via Reverse DNS Lookup Affected: prior to 10.12.1 |
| CVE-2023-3251 | 4.9 | Aug 29 | A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This… Affected: before 10.6.0 |
| CVE-2024-0955 | 4.8 | Feb 7 | A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could… Affected: before 10.7.0 |
| CVE-2016-1000029 | 4.8 | Dec 27 | Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would potentially impact other admins (Tenable IDs 5218 and 5269) Affected: before 6.8.0 |
| CVE-2016-1000028 | 4.8 | Dec 27 | Tenable Nessus before 6.8 has a stored XSS issue that requires admin-level authentication to the Nessus UI, and would only potentially impact other admins Affected: before 6.8.0 |
| CVE-2018-5407 | 4.7 | Nov 15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: before 8.1.1 |
| CVE-2023-3253 | 4.3 | Aug 29 | An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application Affected: before 10.6.0 |
| CVE-2026-57588 | 3.3 | Jun 25 | SQL Injection in Nessus via Malicious Scan Result File Import Affected: prior to 10.12.1 |
| CVE-2019-3962 | 3.3 | Jul 1 | Content Injection vulnerability in Tenable Nessus prior to 8.5.0 may allow an authenticated, local attacker to exploit this vulnerability by convincing another targeted Nessus… Affected: before 8.5.0 |
| CVE-2014-4980 | – | Jul 23 | The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter Affected: 5.2.3; 5.2.4; 5.2.5; 5.2.6; 5.2.7 |
| CVE-2014-2848 | – | Apr 11 | A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in… Affected: 5.2.1 |