Advisories · Technology
tenable Nessus.
Every CVE that names tenable Nessus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 1.6 Low
SQL Injection in Nessus via Malicious Scan Result File Import
- tenable Nessus
- SQL injection
- CVSS 2.1 Low
SQL Injection in Nessus via Reverse DNS Lookup
- tenable Nessus
- SQL injection
- CVSS 8.4 High
Local Privilege Escalation
- Tenable Nessus
- Privilege escalation
- CVSS 4.3 Medium
Log Poisoning in Nessus
- Tenable Nessus
- Other injection
- CVSS 7.8 High
Local Priviledge Escalation
- Tenable Nessus
- Broken access control
- CVSS 8.2 High
Race Condition
- Tenable Nessus
- Race condition
- CVSS 7.8 High
Tenable Nessus: When installing Nessus to a directory outside of the default location on a Windows host…
- Tenable Nessus
- CWE-281
- CVSS 7.8 High
Local Privilege Escalation
- Tenable Nessus Agent
- Tenable Nessus
- Privilege escalation
- CVSS 6.5 Medium
SQL injection in Tenable Nessus
- Tenable Nessus
- SQL injection
- CVSS 4.8 Medium
Stored XSS vulnerability
- Tenable Nessus
- CWE-20
- CVSS 6.8 Medium
Arbitrary File Write
- Tenable Nessus
- CVSS 6.7 Medium
Improper privilege management in Tenable Nessus and others
- Tenable Nessus
- Tenable Nessus Agent
- Privilege escalation
- CVSS 4.3 Medium
Improper authorization in Nessus
- Tenable Nessus
- Broken access control
- CVSS 6.8 Medium
Arbitrary File Write
- Tenable Nessus
- CWE-427
- CVSS 4.1 Medium
Pass-back vulnerability in Nessus
- Tenable Nessus
- Hard-coded credentials
- CVSS 6.3 Medium
Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability
- Tenable.io
- Tenable Nessus
- CWE-427
- CVSS 6.5 Medium
Sensitive information in log files in Tenable Nessus
- Tenable Nessus
- Information disclosure
-
Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios.
- Tenable Nessus
-
Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during scan configuration.
- Tenable Nessus
-
Nessus versions 8.6.0 and earlier were found to contain a Denial of Service vulnerability due to improper validation of specific imported scan types.
- Tenable Nessus
-
Nessus 8.5.2 and earlier on Windows platforms were found to contain an issue where certain system files could be overwritten arbitrarily, potentially creating a denial of service condition.
- Tenable Nessus
-
Tenable Nessus: Content Injection vulnerability in Tenable Nessus prior to 8.5.0 may allow an…
- Tenable Nessus
-
Nessus versions 8.4.0 and earlier were found to contain a reflected XSS vulnerability due to improper validation of user-supplied input.
- Tenable Nessus
-
Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input.
- Tenable Nessus
-
In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application.
- Tenable Nessus
-
In Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation.
- Tenable Nessus
-
Tenable Nessus: When installing Nessus to a directory outside of the default location…
- Tenable Nessus
-
Tenable Nessus: When linking a Nessus scanner or agent to Tenable.io or other manager…
- Tenable Nessus