Tenable
- Products in analyzed data
- 1
- Catalog vulnerabilities
- 214
Severity across 4 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 4 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 214 vulnerability records associated with Tenable.
Among the 4 records analyzed by CyStack, 3 are High or Critical and 0 appear in the CISA KEV catalog for priority remediation.
The list below is based on vulnerabilities that have been viewed and analyzed; it does not represent the complete global vulnerability corpus. Use the product filter to narrow the scope.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-19682Command Injection | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityCritical |
CVE-2026-19681Command Injection | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityCritical |
CVE-2026-19680SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityHigh |
CVE-2026-19679Improper Input Validation | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityHigh |
CVE-2026-19639Improper Access Control | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityMedium |
CVE-2026-19636Insuffucient Protections Lead to Brute Force | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityMedium |
CVE-2026-19635Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityHigh |
CVE-2026-19631SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityMedium |
CVE-2026-19629Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityHigh |
CVE-2026-19628Remote Code Execution | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityHigh |
CVE-2026-19626Remote Code Execution | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published08/14/2026 | SeverityCritical |
CVE-2026-64881Command Injection | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published07/21/2026 | SeverityHigh |
CVE-2026-64880Blind SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published07/21/2026 | SeverityHigh |
CVE-2026-64879Command Injection | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published07/21/2026 | SeverityCritical |
CVE-2026-64878Command Injection | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published07/21/2026 | SeverityCritical |
CVE-2026-64877CVE-2026-64877 | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published07/21/2026 | SeverityCritical |
CVE-2026-15265Tenable Agent Path Traversal Leading to Remote Code Execution | Exploitation statusNot known exploited | FixNot confirmed | Affected producttenable_agent | Published07/14/2026 | SeverityCritical |
CVE-2026-57588SQL Injection in Nessus via Malicious Scan Result File Import | Exploitation statusNot known exploited | FixNot confirmed | Affected productNessus | Published06/25/2026 | SeverityLow |
CVE-2026-57587SQL Injection in Nessus via Reverse DNS Lookup | Exploitation statusNot known exploited | FixNot confirmed | Affected productNessus | Published06/25/2026 | SeverityLow |
CVE-2026-13007Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure | Exploitation statusNot known exploited | FixYes | Affected productTenable Identity Exposure | Published06/23/2026 | SeverityHigh |
CVE-2026-47358CVE-2026-47358 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTerrascan | Published05/19/2026 | SeverityCritical |
CVE-2026-47357CVE-2026-47357 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTerrascan | Published05/19/2026 | SeverityCritical |
CVE-2026-47356CVE-2026-47356 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTerrascan | Published05/19/2026 | SeverityHigh |
CVE-2026-33694Junction File Manipulation | Exploitation statusNot known exploited | FixYes | Affected productTenable Nessus, Tenable Nessus Agent | Published04/23/2026 | SeverityHigh |
CVE-2026-4433CVE-2026-4433 | Exploitation statusNot known exploited | FixYes | Affected productTenable Operation Technology | Published03/24/2026 | SeverityLow |
CVE-2026-2698Improper Access Control | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published02/23/2026 | SeverityMedium |
CVE-2026-2697Indirect Object Reference (IDOR) in Security Center | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published02/23/2026 | SeverityLow |
CVE-2026-2630[R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2 | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published02/17/2026 | SeverityHigh |
CVE-2026-2026Improper Access Control Allows Denial of Service | Exploitation statusNot known exploited | FixYes | Affected productAgent | Published02/13/2026 | SeverityMedium |
CVE-2025-36640Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productNessus Agent | Published01/13/2026 | SeverityHigh |
CVE-2025-36636Improper Access Control | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published10/08/2025 | SeverityMedium |
CVE-2025-36630Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published07/01/2025 | SeverityHigh |
CVE-2025-36632Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productAgent | Published06/16/2025 | SeverityHigh |
CVE-2025-36631Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productAgent | Published06/13/2025 | SeverityHigh |
CVE-2025-36633Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productAgent | Published06/13/2025 | SeverityHigh |
CVE-2025-24917Improper Access Control leads to Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productNetwork Monitor | Published05/23/2025 | SeverityHigh |
CVE-2025-24916Improper Access Control leads to Local Priviledge Escalation | Exploitation statusNot known exploited | FixYes | Affected productNetwork Monitor | Published05/23/2025 | SeverityHigh |
CVE-2025-36625Log Poisoning in Nessus | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published04/18/2025 | SeverityMedium |
CVE-2025-24914Local Priviledge Escalation | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published04/18/2025 | SeverityHigh |
CVE-2025-24915CVE-2025-24915 | Exploitation statusNot known exploited | FixYes | Affected productNessus Agent | Published03/21/2025 | SeverityHigh |
CVE-2025-0760Stored Credential Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productTenable Identity Exposure | Published02/25/2025 | SeverityLow |
CVE-2025-1091Broken Authorization Schema | Exploitation statusNot known exploited | FixYes | Affected productTenable Identity Exposure | Published02/25/2025 | SeverityMedium |
CVE-2024-12174CVE-2024-12174 | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published12/09/2024 | SeverityLow |
CVE-2024-9158XSS | Exploitation statusNot known exploited | FixYes | Affected productNessus Network Monitor | Published09/30/2024 | SeverityHigh |
CVE-2024-3232Formula Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productTenable Identity Exposure | Published07/16/2024 | SeverityHigh |
CVE-2024-5759Improper privilege management | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published06/12/2024 | SeverityMedium |
CVE-2024-1891Stored Cross Site Scripting | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published06/12/2024 | SeverityLow |
CVE-2024-3292Race Condition | Exploitation statusNot known exploited | FixYes | Affected productNessus Agent | Published05/17/2024 | SeverityHigh |
CVE-2024-3291Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productNessus Agent | Published05/17/2024 | SeverityHigh |
CVE-2024-3290Race Condition | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published05/17/2024 | SeverityHigh |
CVE-2024-3289CVE-2024-3289 | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published05/17/2024 | SeverityHigh |
CVE-2024-2390Local Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productNessus Agent | Published03/18/2024 | SeverityHigh |
CVE-2024-1683DLL Injection in Tenable Identity Exposure Secure Relay | Exploitation statusNot known exploited | FixYes | Affected productTenable Identity Exposure Secure Relay | Published02/23/2024 | SeverityHigh |
CVE-2024-1471HTML Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published02/14/2024 | SeverityMedium |
CVE-2024-1367Command Injection Vulnerability in Tenable Security Center | Exploitation statusNot known exploited | FixYes | Affected productSecurity Center | Published02/14/2024 | SeverityHigh |
CVE-2024-0971CVE-2024-0971 | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published02/06/2024 | SeverityMedium |
CVE-2024-0955Stored XSS vulnerability | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published02/06/2024 | SeverityMedium |
CVE-2023-6178CVE-2023-6178 | Exploitation statusNot confirmed | FixYes | Affected productNessus Agent | Published11/20/2023 | SeverityMedium |
CVE-2023-6062Arbitrary File Write | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published11/20/2023 | SeverityMedium |
CVE-2023-5847CVE-2023-5847 | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published11/01/2023 | SeverityMedium |
CVE-2023-5624Blind SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productNessus Network Monitor | Published10/26/2023 | SeverityHigh |
CVE-2023-5623Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productNessus Network Monitor | Published10/26/2023 | SeverityHigh |
CVE-2023-5622Privilege Escalation | Exploitation statusNot known exploited | FixYes | Affected productNessus Network Monitor | Published10/26/2023 | SeverityHigh |
CVE-2023-3253Improper authorization in Nessus | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published08/29/2023 | SeverityMedium |
CVE-2023-3252Arbitrary File Write | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published08/29/2023 | SeverityMedium |
CVE-2023-3251Pass-back vulnerability in Nessus | Exploitation statusNot known exploited | FixYes | Affected productNessus | Published08/29/2023 | SeverityMedium |
CVE-2023-2005Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productTenable.io | Published06/26/2023 | SeverityMedium |
CVE-2022-4313CVE-2022-4313 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTenable.io, Tenable.sc and Nessus | Published03/15/2023 | SeverityHigh |
CVE-2023-0524CVE-2023-0524 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTenable.io, Tenable.sc, Nessus | Published02/01/2023 | SeverityHigh |
CVE-2023-24495CVE-2023-24495 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTenable.sc | Published01/25/2023 | SeverityMedium |
CVE-2023-24493CVE-2023-24493 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTenable.sc | Published01/25/2023 | SeverityMedium |
CVE-2023-24494CVE-2023-24494 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTenable.sc | Published01/25/2023 | SeverityMedium |
CVE-2023-0476CVE-2023-0476 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTenable.sc | Published01/25/2023 | SeverityMedium |
CVE-2023-0101CVE-2023-0101 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNessus | Published01/20/2023 | SeverityHigh |
CVE-2022-3499CVE-2022-3499 | Exploitation statusNot known exploited | FixNot confirmed | Affected productTenable Nessus | Published10/31/2022 | SeverityMedium |
CVE-2022-33757CVE-2022-33757 | Exploitation statusNot known exploited | FixYes | Affected productTenable Nessus | Published10/24/2022 | SeverityMedium |
CVE-2022-28291CVE-2022-28291 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNessus Professional | Published10/17/2022 | SeverityMedium |
CVE-2022-32974CVE-2022-32974 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNessus | Published06/21/2022 | SeverityUnknown |
CVE-2022-32973CVE-2022-32973 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNessus | Published06/21/2022 | SeverityUnknown |
CVE-2022-24828Missing input validation can lead to command execution in composer | Exploitation statusNot known exploited | FixNot confirmed | Affected productcomposer | Published04/13/2022 | SeverityHigh |
CVE-2022-24785Path Traversal in Moment.js | Exploitation statusNot known exploited | FixYes | Affected productmoment | Published04/04/2022 | SeverityHigh |
CVE-2022-0778Infinite loop in BN_mod_sqrt() reachable when parsing certificates | Exploitation statusNot known exploited | FixYes | Affected productOpenSSL | Published03/15/2022 | SeverityHigh |
CVE-2022-23990CVE-2022-23990 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/26/2022 | SeverityHigh |
CVE-2022-23852CVE-2022-23852 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/24/2022 | SeverityCritical |
CVE-2022-0130CVE-2022-0130 | Exploitation statusNot confirmed | FixNot confirmed | Affected productTenable.sc | Published01/14/2022 | SeverityUnknown |
CVE-2022-22822CVE-2022-22822 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/08/2022 | SeverityCritical |
CVE-2022-22823CVE-2022-22823 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/08/2022 | SeverityCritical |
CVE-2022-22824CVE-2022-22824 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/08/2022 | SeverityCritical |
CVE-2022-22825CVE-2022-22825 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/08/2022 | SeverityHigh |
CVE-2022-22826CVE-2022-22826 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/08/2022 | SeverityHigh |
CVE-2022-22827CVE-2022-22827 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/08/2022 | SeverityHigh |
CVE-2021-46143CVE-2021-46143 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/06/2022 | SeverityHigh |
CVE-2021-45960CVE-2021-45960 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/01/2022 | SeverityHigh |
CVE-2021-44224Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier | Exploitation statusNot confirmed | FixYes | Affected productApache HTTP Server | Published12/20/2021 | SeverityUnknown |
CVE-2021-44790Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier | Exploitation statusNot confirmed | FixYes | Affected productApache HTTP Server | Published12/20/2021 | SeverityUnknown |
CVE-2021-21707Special characters break path parsing in XML functions | Exploitation statusNot confirmed | FixYes | Affected productPHP | Published11/29/2021 | SeverityMedium |
CVE-2021-20135CVE-2021-20135 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNessus | Published11/02/2021 | SeverityUnknown |
CVE-2021-41182XSS in the `altField` option of the Datepicker widget | Exploitation statusNot confirmed | FixYes | Affected productjquery-ui | Published10/26/2021 | SeverityMedium |
CVE-2021-41184XSS in the `of` option of the `.position()` util | Exploitation statusNot confirmed | FixYes | Affected productjquery-ui | Published10/26/2021 | SeverityMedium |
CVE-2021-41183XSS in `*Text` options of the Datepicker widget | Exploitation statusNot confirmed | FixYes | Affected productjquery-ui | Published10/26/2021 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan