Read the docs

Tenable

Records218All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical31CVSS 9.0–10.0
CVSS high88CVSS 7.0–8.9

Exploited now

Tenable records in CISA KEV
TI-2020-08897 JQuery Cross-Site Scripting (XSS) Vulnerability Priority CRITICAL 88KEV 2025-01-23TI-2019-08259 PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2022-03-25TI-2021-17490 Apache HTTP Server-Side Request Forgery (SSRF) Priority CRITICAL 98KEV 2021-12-01

Components

Products in the NVD configurations · select one to filter the records
Nessus 68 records HIGH Tenable.sc 46 records CRITICAL Security Center 32 records MEDIUM Nessus Network Monitor 14 records CRITICAL Nessus Agent 13 records MEDIUM Log Correlation Engine 9 records CRITICAL Appliance 4 records MEDIUM Identity Exposure 3 records MEDIUM

Records

14 records in Nessus Network Monitor · all components

TI-2021-02645 CVE-2021-3711 · GHSA-5ww6-px42-wc85

SM2 Decryption Buffer Overflow

Priority CRITICAL 91

In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87816 Published 2021-08-24 Partial fix · 111.16.0 CWE-120
TI-2021-06204 CVE-2021-23840 · GHSA-qgm6-9472-pwq7

Integer overflow in CipherUpdate

Priority HIGH 70

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.50732 Published 2021-02-16 Partial fix · 111.14.0 CWE-190
TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

Priority HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476
TI-2021-02646 CVE-2021-3712 · GHSA-q9wj-f4qw-6vfj

Read buffer overruns processing ASN.1 strings

Priority MEDIUM 63

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.48084 Published 2021-08-24 Partial fix · 111.16.0 CWE-125
TI-2021-02414 CVE-2021-3450 · GHSA-8hfj-xrj2-pm22

CA certificate check bypass with X509_V_FLAG_X509_STRICT

Priority MEDIUM 58

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.18339 Published 2021-03-25 Fixed in 111.15.0 CWE-295
TI-2023-05174 CVE-2023-5622 · GHSA-2wg8-2hgh-5f85

Privilege escalation in Tenable Nessus Network Monitor

Priority MEDIUM 40

Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00461 Published 2023-10-26 Fixed in 6.3.0 CWE-269
TI-2021-06205 CVE-2021-23841 · GHSA-84rm-qf37-fgc2

Null pointer deref in X509_issuer_and_serial_hash()

Priority LOW 37

The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0741 Published 2021-02-16 Partial fix · 111.14.0 CWE-476
TI-2024-08503 CVE-2024-9158 · GHSA-x6r9-hvfc-r4m7

XSS in Tenable Nessus Network Monitor

Priority LOW 36

A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.0032 Published 2024-09-30 Fixed in 6.5.0 CWE-79
TI-2020-01890 CVE-2020-1971 · GHSA-whf2-mq76-2fhv

EDIPARTYNAME NULL pointer dereference

Priority LOW 36

The X.509 GeneralName type is a generic type for representing different types of names.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.06994 Published 2020-12-08 Partial fix CWE-476
TI-2025-18618 CVE-2025-24917 · GHSA-9cwm-pw9v-q42q

Improper Access Control leads to Local Privilege Escalation

Priority LOW 35

In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2025-05-23 Fixed in 6.5.1 CWE-284
TI-2025-18617 CVE-2025-24916 · GHSA-9wpx-f5qr-7rcr

Improper Access Control leads to Local Priviledge Escalation

Priority LOW 35

When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00156 Published 2025-05-23 Fixed in 6.5.1 CWE-284
TI-2023-05175 CVE-2023-5623 · GHSA-f5w9-q8fj-h9jj

Privilege escalation in Tenable Nessus Network Monitor

Priority LOW 35

NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2023-10-26 Fixed in 6.3.0 CWE-276
TI-2023-05176 CVE-2023-5624 · GHSA-x5jj-693v-79pc

Blind SQL injection in Tenable Nessus Network Monitor

Priority LOW 34

Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00584 Published 2023-10-26 Fixed in 6.3.0 CWE-20
Open these records in search →