Tenable.sc
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-24495 | Tenable.sc versions 5.23.1 and earlier | A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. | MEDIUM 6.5 | 0.9 % | ||
| CVE-2023-24494 | Tenable.sc versions 5.23.1 and earlier | A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it | MEDIUM 5.4 | 0.7 % | ||
| CVE-2023-24493 | Tenable.sc versions 5.23.1 and earlier | A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An au | MEDIUM 5.7 | 0.7 % | ||
| CVE-2023-0476 | Tenable.sc versions 5.23.1 and earlier | A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authe | MEDIUM 6.5 | 0.7 % | ||
| CVE-2022-0130 | 5.14.0 through 5.19.1 | Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow a remote, unauthenti | HIGH 8.1 | 1.6 % | ||
| CVE-2021-20076 | 5.13.0 through 5.17.0 | Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unpri | HIGH 8.8 | 2.1 % | ||
| CVE-2020-5808 | All versions prior to 5.17.0 | In certain scenarios in Tenable.sc prior to 5.17.0, a scanner could potentially be used outside the user's defined scan zone without a parti | HIGH 7.5 | 1.1 % | ||
| CVE-2020-5737 | < 5.14.0 | Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a | MEDIUM 5.4 | 0.6 % |