Advisories · Technology
Tenable Security Center.
Every CVE that names Tenable Security Center among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.7 Medium
Improper Access Control
- Tenable Security Center
- Broken access control
- CVSS 2.1 Low
Indirect Object Reference (IDOR) in Security Center
- Tenable Security Center
- Broken access control
- CVSS 7.4 High
[R1] Stand-alone Security Patches Available for Tenable Security Center versions 6.5.1, 6.6.0 and 6.7.2: SC-202602.1 + SC-202602.2
- Tenable Security Center
- Command injection
- CVSS 4.3 Medium
Improper Access Control
- Tenable Security Center
- Broken access control
- CVSS 2.7 Low
Improper certificate validation in Tenable Security Center
- Tenable Security Center
- Weak cryptography or TLS
- CVSS 5.4 Medium
Improper privilege management
- Tenable Security Center
- Privilege escalation
- CVSS 3.5 Low
Stored Cross Site Scripting
- Tenable Security Center
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
HTML Injection Vulnerability
- Tenable Security Center
- CWE-20
- CVSS 7.2 High
Command Injection Vulnerability in Tenable Security Center
- Tenable Security Center
- Command injection
- CVSS 6.3 Medium
Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability
- Tenable.io
- Tenable Nessus
- CWE-427