Vulnerabilities in Tenable
81 resultsCVE-2018-1142—Tenable Appliance versions 4.6.1 and earlier have been found to contain a single XSS vulnerability. Utilizing a specially crafted request, aEPSS 0.5%CVE-2026-47356HIGHTerrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POEPSS 0.5%CVE-2018-1153—Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in tEPSS 0.5%CVE-2026-47357CRITICALTerrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan eEPSS 0.5%CVE-2026-47358CRITICALTerrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when EPSS 0.5%CVE-2024-3232HIGHFormula Injection VulnerabilityEPSS 0.5%CVE-2023-5622HIGHPrivilege Escalation EPSS 0.5%CVE-2021-21371MEDIUMExecution of untrusted code through config fileEPSS 0.5%CVE-2026-57587LOWSQL Injection in Nessus via Reverse DNS LookupEPSS 0.4%CVE-2024-1471MEDIUMHTML Injection VulnerabilityEPSS 0.4%CVE-2023-2005MEDIUMTenable Plugin Feed ID #202306261202 Fixes Privilege Escalation VulnerabilityEPSS 0.4%CVE-2026-57588LOWSQL Injection in Nessus via Malicious Scan Result File ImportEPSS 0.3%CVE-2024-9158HIGHXSSEPSS 0.3%CVE-2024-1683HIGHDLL Injection in Tenable Identity Exposure Secure RelayEPSS 0.3%CVE-2024-5759MEDIUMImproper privilege managementEPSS 0.3%CVE-2024-1891LOWStored Cross Site ScriptingEPSS 0.3%CVE-2025-36625MEDIUMLog Poisoning in NessusEPSS 0.3%CVE-2025-1091MEDIUMBroken Authorization SchemaEPSS 0.3%CVE-2026-2698MEDIUMImproper Access ControlEPSS 0.2%CVE-2026-2697LOWIndirect Object Reference (IDOR) in Security CenterEPSS 0.2%