Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Tenable Identity Exposure 3.77.9 Clear all filters
TI-2025-00648 CVE-2025-0760 · GHSA-j5j2-54p5-7p3j

Stored Credential Disclosure Vulnerability

Priority LOW 13

A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials due to lack of encryption.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00177 Published 2025-02-25 Fixed in 3.77.9 CWE-522
TI-2025-00927 CVE-2025-1091 · GHSA-mmcm-44xw-5gf8

Broken Authorization Schema

Priority LOW 20

A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if the URL is known.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00252 Published 2025-02-25 Fixed in 3.77.9 CWE-862