Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Tenable Nessus 10.7.0 Clear all filters
TI-2024-00895 CVE-2024-0971 · GHSA-2j63-x9pq-h9wc

SQL injection in Tenable Nessus

Priority LOW 30

A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00779 Published 2024-02-06 Fixed in 10.7.0 CWE-89
TI-2024-00880 CVE-2024-0955 · GHSA-6j46-c3h7-p829

Stored XSS in Tenable Nessus

Priority LOW 23

A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could lead to the execution of remote arbitrary s…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00561 Published 2024-02-06 Fixed in 10.7.0 CWE-20