Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Tenable Component: Identity Exposure Clear all filters
TI-2026-11066 CVE-2026-13007 · GHSA-rqcc-h287-275c

Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure

Priority MEDIUM 44

Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and d…

CVSS 4.0HIGH 8.5 Network No auth No interaction EPSS 0.0061 Published 2026-06-23 Fixed in 3.93.5 CWE-306
TI-2024-03030 CVE-2024-3232 · GHSA-pm8c-jgcw-6vj7

Formula Injection Vulnerability

Priority LOW 36

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator…

CVSS 3.1HIGH 7.6 Network High privileges User interaction EPSS 0.00469 Published 2024-07-16 No fix listed CWE-1236
TI-2024-01564 CVE-2024-1683 · GHSA-3fhw-3rw6-474c

DLL Injection in Tenable Identity Exposure Secure Relay

Priority LOW 32

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of…

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.0031 Published 2024-02-23 Fixed in 3.59.4 CWE-78