TE
Vendor
Tenable
23 products with CVEs on record
215
CVEs
3
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-19682
SC
Security Center
Tenable
9.9
2%
Aug 14Command Injection
CVE-2026-19681
SC
Security Center
Tenable
9.9
4%
Aug 14Command Injection
CVE-2026-19680
SC
Security Center
Tenable
7.1
0%
Aug 14SQL Injection
CVE-2026-19679
SC
Security Center
Tenable
8.8
2%
Aug 14Improper Input Validation
CVE-2026-19639
SC
Security Center
Tenable
4.3
0%
Aug 14Improper Access Control
CVE-2026-19636
SC
Security Center
Tenable
5.3
0%
Aug 14Insuffucient Protections Lead to Brute Force
CVE-2026-19635
SC
Security Center
Tenable
8.8
0%
Aug 14Local Privilege Escalation
CVE-2026-19631
SC
Security Center
Tenable
4.9
0%
Aug 14SQL Injection
CVE-2026-19629
SC
Security Center
Tenable
8.1
0%
Aug 14Privilege Escalation
CVE-2026-19628
SC
Security Center
Tenable
7.2
2%
Aug 14Remote Code Execution
CVE-2026-19626
SC
Security Center
Tenable
9.9
2%
Aug 14Remote Code Execution
CVE-2026-64881
SC
Security Center
Tenable
8.8
2%
Jul 21Command Injection
CVE-2026-64880
SC
Security Center
Tenable
7.1
0%
Jul 21Blind SQL Injection
CVE-2026-64879
SC
Security Center
Tenable
9.9
2%
Jul 21Command Injection
CVE-2026-64878
SC
Security Center
Tenable
9.9
1%
Jul 21Command Injection
CVE-2026-64877
SC
Security Center
Tenable
8.4
0%
Jul 21An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database
CVE-2026-15265
TE
tenable_agent
tenable
9.1
1%
Jul 14Tenable Agent Path Traversal Leading to Remote Code Execution
CVE-2026-57588
NE
Nessus
tenable
3.3
0%
Jun 25SQL Injection in Nessus via Malicious Scan Result File Import
CVE-2026-57587
NE
Nessus
tenable
5.3
0%
Jun 25SQL Injection in Nessus via Reverse DNS Lookup
CVE-2026-13007
TI
Tenable Identity Exposure
tenable
7.5
1%
Jun 23Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure
CVE-2026-47358
TE
Terrascan
tenable
8.6
0%
May 19Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode
CVE-2026-47357
TE
Terrascan
tenable
8.6
0%
May 19Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST…
CVE-2026-47356
TE
Terrascan
tenable
8.6
0%
May 19Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST…
CVE-2026-33694
NA
Nessus Agent
Tenable
7.8
0%
Apr 23Junction File Manipulation
CVE-2026-4433
OT
Operational Technology Exposure
Tenable
4.3
0%
Mar 24An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of socket, port, and service information via the ostunnel user and GatewayPorts
CVE-2026-2698
SC
Security Center
Tenable
6.5
0%
Feb 23An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope
CVE-2026-2697
SC
Security Center
Tenable
8.8
0%
Feb 23An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter
CVE-2026-2026
NA
Nessus Agent
Tenable
6.1
0%
Feb 13A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of…
CVE-2025-36630
NE
Nessus
Tenable
7.1
0%
Jul 2In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM…
CVE-2025-36632
NA
Nessus Agent
Tenable
7.8
0%
Jun 16In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege
CVE-2025-36633
NA
Nessus Agent
Tenable
7.8
0%
Jun 13In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege,…
CVE-2025-36631
NA
Nessus Agent
Tenable
7.8
0%
Jun 13In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM…
CVE-2025-24917
NN
Nessus Network Monitor
Tenable
7.8
0%
May 23In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with…
CVE-2025-24916
NN
Nessus Network Monitor
Tenable
7.8
0%
May 23When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for…
CVE-2024-9158
NN
Nessus Network Monitor
Tenable
4.6
0%
Sep 30A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the…
CVE-2024-3232
IE
Identity Exposure
Tenable
6.8
0%
Jul 16A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form…
CVE-2024-5759
SC
Security Center
Tenable
6.3
0%
Jun 12An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without…
CVE-2024-1891
SC
Security Center
Tenable
5.4
0%
Jun 12A stored cross site scripting vulnerability exists in Tenable Security Center where an authenticated, remote attacker could inject HTML code into a web application scan result…
CVE-2024-1683
IE
Identity Exposure
Tenable
7.3
0%
Feb 23A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for…
CVE-2024-1471
SC
Security Center
Tenable
4.8
0%
Feb 14An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters,…
CVE-2024-1367
SC
Security Center
Tenable
7.2
2%
Feb 14A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters,…
CVE-2024-0971
NE
Nessus
Tenable
6.5
1%
Feb 7A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content
CVE-2024-0955
NE
Nessus
Tenable
4.8
1%
Feb 7A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could…
CVE-2023-6178
NE
Nessus
Tenable
6.5
1%
Nov 20An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary…
CVE-2023-6062
NE
Nessus
Tenable
6.5
1%
Nov 20An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to…
CVE-2023-5847
NA
Nessus Agent
Tenable
7.3
0%
Nov 1Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts
CVE-2023-5624
NN
Nessus Network Monitor
Tenable
7.2
1%
Oct 26Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation
CVE-2023-5623
NN
Nessus Network Monitor
Tenable
7.8
0%
Oct 26NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a…
CVE-2023-5622
NN
Nessus Network Monitor
Tenable
8.8
0%
Oct 26Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted…
CVE-2023-3253
NE
Nessus
Tenable
4.3
1%
Aug 29An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application
CVE-2023-3252
NE
Nessus
Tenable
6.5
1%
Aug 29An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on…
CVE-2023-3251
NE
Nessus
Tenable
4.9
1%
Aug 29A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This…
CVE-2023-2005
TE
Tenable.io
Tenable
8.8
0%
Jun 26Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID…
CVE-2022-4313
NE
Nessus
Tenable
8.8
1%
Mar 15A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate…
CVE-2023-0524
TE
Tenable.sc
Tenable
8.8
1%
Feb 1As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally
CVE-2023-24495
TE
Tenable.sc
Tenable
6.5
1%
Jan 26A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data
CVE-2023-24494
TE
Tenable.sc
Tenable
5.4
1%
Jan 26A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users
CVE-2023-24493
TE
Tenable.sc
Tenable
5.7
1%
Jan 26A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users
CVE-2023-0476
TE
Tenable.sc
Tenable
6.5
1%
Jan 26A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users
CVE-2023-0101
NE
Nessus
Tenable
8.8
1%
Jan 20A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1