Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2024-05347 CVE-2024-5759 · GHSA-j36h-6hh5-9jw6

Improper privilege management

Priority LOW 28

An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00305 Published 2024-06-12 Fixed in 6.4.0 CWE-269
Priority LOW 24

A stored cross site scripting vulnerability exists in Tenable Security Center where an authenticated, remote attacker could inject HTML code into a web application scan result page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00302 Published 2024-06-12 Fixed in 6.4.0 CWE-79