SC
Product
Security Center
34
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 6High 15Medium 12Low 0
Watch
Add Security Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19679 | 8.8 | Aug 14 | Improper Input Validation Affected: before 6.9.0 |
| CVE-2026-19635 | 8.8 | Aug 14 | Local Privilege Escalation Affected: before 6.9.0 |
| CVE-2026-64881 | 8.8 | Jul 21 | Command Injection Affected: 6.6.0 through 6.8.0 |
| CVE-2026-2697 | 8.8 | Feb 23 | Indirect Object Reference (IDOR) in Security Center Affected: before 6.8.0 |
| CVE-2026-2630 | 8.8 | Feb 17 | [R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2 Affected: through 6.7.2 |
| CVE-2023-2005 | 8.8 | Jun 26 | Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID… Affected: All versions, or not specified |
| CVE-2018-1154 | 8.8 | Aug 2 | In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force,… Affected: before 5.7.0 |
| CVE-2017-11508 | 8.8 | Nov 2 | SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic… Affected: 5.5.0; 5.5.1; 5.5.2 |
| CVE-2026-64877 | 8.4 | Jul 21 | An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database Affected: 6.6.0 through 6.8.0 |
| CVE-2026-19629 | 8.1 | Aug 14 | Privilege Escalation Affected: before 6.9.0 |
| CVE-2019-11044 | 7.5 | Dec 23 | In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0 on Windows, PHP link() function accepts filenames with embedded \0 byte and treats them as terminating at that… Affected: before 5.19.0 |
| CVE-2026-19628 | 7.2 | Aug 14 | Remote Code Execution Affected: before 6.9.0 |
| CVE-2024-1367 | 7.2 | Feb 14 | A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters,… Affected: before 6.3.0 |
| CVE-2026-19680 | 7.1 | Aug 14 | SQL Injection Affected: before 6.9.0 |
| CVE-2026-64880 | 7.1 | Jul 21 | Blind SQL Injection Affected: 6.6.0 through 6.8.0 |
Showing 15