Tenable Nessus vulnerabilities, page 4

72 vulnerabilities

Known vulnerabilities in Tenable Nessus, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.3CVE-2026-57588tenablenessus
EPSS score
0.33%
A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.5.3CVE-2026-57587tenablenessus
EPSS score
0.45%
A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.7.8CVE-2026-33694tenable, inc.tenable nessus, tenable nessus agent+2
EPSS score
0.20%
This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.8.8CVE-2023-2005tenablenessus+2
EPSS score
0.38%
Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.8.8CVE-2023-0101tenablenessus
EPSS score
0.82%
A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host.8.8CVE-2023-0524tenablenessus+2
EPSS score
0.64%
As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This could allow a malicious actor with sufficient permissions to modify environment variables and abuse an impacted plugin in order to escalate privileges. We have resolved the issue and also made several defense-in-depth fixes alongside. While the probability of successful exploitation is low, Tenable is committed to securing our customers’ environments and our products. The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202212212055.7.3CVE-2023-5847tenablenessus+1
EPSS score
0.22%
Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.6.8CVE-2023-6178tenablenessus+1
EPSS score
0.83%
An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.6.8CVE-2023-6062tenablenessus
EPSS score
1.03%
An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.4.9CVE-2023-3251tenablenessus
EPSS score
0.61%
A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0.6.8CVE-2023-3252tenablenessus
EPSS score
0.80%
An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.4.3CVE-2023-3253tenablenessus
EPSS score
0.52%
An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application.