Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Tenable Nessus Network Monitor 6.3.0 Clear all filters
TI-2023-05176 CVE-2023-5624 · GHSA-x5jj-693v-79pc

Blind SQL injection in Tenable Nessus Network Monitor

Priority LOW 34

Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00584 Published 2023-10-26 Fixed in 6.3.0 CWE-20
TI-2023-05175 CVE-2023-5623 · GHSA-f5w9-q8fj-h9jj

Privilege escalation in Tenable Nessus Network Monitor

Priority LOW 35

NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2023-10-26 Fixed in 6.3.0 CWE-276
TI-2023-05174 CVE-2023-5622 · GHSA-2wg8-2hgh-5f85

Privilege escalation in Tenable Nessus Network Monitor

Priority MEDIUM 40

Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00461 Published 2023-10-26 Fixed in 6.3.0 CWE-269