Tenable Nessus vulnerabilities

• tenable nessus SQL Injection CVE-2026-103946 8.7 HighOctober 14, 2026
• tenable agent, nessus agent +1 more Tenable Agent Path Traversal Leading to Remote Code Execution CVE-2026-15265 9.3 CriticalJuly 14, 2026
• tenable nessus SQL Injection in Nessus via Malicious Scan Result File Import CVE-2026-57588 Public exploit 1.6 LowJune 25, 2026
• tenable nessus SQL Injection in Nessus via Reverse DNS Lookup CVE-2026-57587 2.1 LowJune 25, 2026
• tenable nessus, nessus agent, tenable, inc. tenable nessus, tenable nessus agent +2 more Junction File Manipulation CVE-2026-33694 7.4 HighApril 23, 2026
• tenable agent, nessus agent +1 more Improper Access Control Allows Denial of Service CVE-2026-2026 5.4 MediumFebruary 13, 2026
• tenable nessus agent Local Privilege Escalation CVE-2025-36640 7.3 HighJanuary 13, 2026
• tenable nessus Local Privilege Escalation CVE-2025-36630 8.4 HighJuly 1, 2025
• tenable agent, nessus agent +1 more Local Privilege Escalation CVE-2025-36632 7.8 HighJune 16, 2025
• tenable agent, nessus agent +1 more Local Privilege Escalation CVE-2025-36631 8.4 HighJune 13, 2025
• tenable agent, nessus agent +1 more Local Privilege Escalation CVE-2025-36633 8.8 HighJune 13, 2025
• tenable network monitor, nessus network monitor +1 more Improper Access Control leads to Local Privilege Escalation CVE-2025-24917 7.8 HighMay 23, 2025
• tenable network monitor, nessus network monitor +1 more Improper Access Control leads to Local Priviledge Escalation CVE-2025-24916 7.0 HighMay 23, 2025
• tenable nessus Log Poisoning in Nessus CVE-2025-36625 4.3 MediumApril 18, 2025
• tenable nessus Local Priviledge Escalation CVE-2025-24914 7.8 HighApril 18, 2025
• tenable nessus agent When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions... CVE-2025-24915 7.8 HighMarch 21, 2025
• tenable nessus network monitor XSS CVE-2024-9158 8.4 HighSeptember 30, 2024
• tenable nessus agent Race Condition CVE-2024-3292 8.2 HighMay 17, 2024
• tenable nessus agent Privilege Escalation CVE-2024-3291 7.8 HighMay 17, 2024
• tenable nessus Race Condition CVE-2024-3290 8.2 HighMay 17, 2024
• tenable nessus When installing Nessus to a directory outside of the default location on a Windows host, Nessus... CVE-2024-3289 7.8 HighMay 17, 2024
• tenable nessus, nessus agent +1 more Local Privilege Escalation CVE-2024-2390 7.8 HighMarch 18, 2024
• tenable nessus A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker... CVE-2024-0971 6.5 MediumFebruary 6, 2024
• tenable nessus Stored XSS vulnerability CVE-2024-0955 4.8 MediumFebruary 6, 2024
• tenable nessus, nessus agent +1 more An arbitrary file write vulnerability exists where an authenticated attacker with privileges on... CVE-2023-6178 6.8 MediumNovember 20, 2023
• tenable nessus Arbitrary File Write CVE-2023-6062 6.8 MediumNovember 20, 2023
• tenable nessus, nessus agent +1 more Under certain conditions, a low privileged attacker could load a specially crafted file during... CVE-2023-5847 6.7 MediumNovember 1, 2023
• tenable nessus network monitor Blind SQL Injection CVE-2023-5624 7.2 HighOctober 26, 2023
• tenable nessus network monitor Privilege Escalation CVE-2023-5623 7.0 HighOctober 26, 2023
• tenable nessus network monitor Privilege Escalation CVE-2023-5622 7.1 HighOctober 26, 2023
• tenable nessus Improper authorization in Nessus CVE-2023-3253 4.3 MediumAugust 29, 2023
• tenable nessus Arbitrary File Write CVE-2023-3252 6.8 MediumAugust 29, 2023
• tenable nessus Pass-back vulnerability in Nessus CVE-2023-3251 4.1 MediumAugust 29, 2023
• tenable nessus, security center, tenable.io +2 more Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability CVE-2023-2005 6.3 MediumJune 26, 2023
• tenable nessus, plugin feed +1 more A vulnerability was reported where through modifying the scan variables, an authenticated user in... CVE-2022-4313 8.8 HighMarch 15, 2023
• tenable nessus, tenable.io, tenable.sc +2 more As part of our Security Development Lifecycle, a potential privilege escalation issue was... CVE-2023-0524 8.8 HighFebruary 1, 2023
• tenable nessus A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and... CVE-2023-0101 8.8 HighJanuary 20, 2023
• tenable nessus, tenable, inc. tenable nessus +1 more An authenticated attacker could utilize the identical agent and cluster node linking keys to... CVE-2022-3499 6.5 MediumOctober 31, 2022
• tenable nessus, tenable, inc. tenable nessus +1 more An authenticated attacker could read Nessus Debug Log file attachments from the web UI without... CVE-2022-33757 6.5 MediumOctober 24, 2022
• tenable nessus Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve... CVE-2022-28291 6.5 MediumOctober 17, 2022
• tenable nessus An authenticated attacker could read arbitrary files from the underlying operating system of the... CVE-2022-32974 6.5 MediumJune 21, 2022
• tenable nessus An authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and... CVE-2022-32973 8.8 HighJune 21, 2022
• openssl, debian linux, fedoraproject fedora +470 more +472 more Infinite loop in BN_mod_sqrt() reachable when parsing certificates CVE-2022-0778 Public exploitFix available EPSS 73.2% 7.5 HighMarch 15, 2022
• libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 more Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function. CVE-2022-23990 Public exploitFix available 7.5 HighJanuary 26, 2022
• libexpat project libexpat, debian linux, netapp clustered data ontap +7 more +9 more Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for... CVE-2022-23852 Public exploitFix available 9.8 CriticalJanuary 24, 2022
• libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 more addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. CVE-2022-22822 Public exploitFix available 9.8 CriticalJanuary 8, 2022
• libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 more build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. CVE-2022-22823 Fix available 9.8 CriticalJanuary 8, 2022
• libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 more defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. CVE-2022-22824 Fix available 9.8 CriticalJanuary 8, 2022
• libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 more lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. CVE-2022-22825 Fix available 8.8 HighJanuary 8, 2022
• libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 more nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. CVE-2022-22826 Fix available 8.8 HighJanuary 8, 2022
• Show olderLoading…