Known vulnerabilities in SecurityCenter

Vendor: Tenable Network Security
Software: SecurityCenter
Software CPE: cpe:2.3:a:tenable_network_security:securitycenter:*:*:*:*:*:*:*:*
Website: https://www.tenable.com/
Total vulnerabilities: 135
Public exploits: 15
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SecurityCenter SecurityCenter is affected by 135 known vulnerabilities: 2 critical, 13 high, 79 medium, 41 low Critical High Medium Low

Vulnerabilities (135)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123015 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-2630		 CWE-78 Medium
No
No
 SC-202602.1, SC-202602.2 18.02.2026 SB2026021828
#VU122779 - Memory corruption
CVE-2026-2006		 CWE-119 Medium
No
No
 SC202604.1, SC202607.1, SC202607.2 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 71 more
#VU122778 - Heap-based Buffer Overflow
CVE-2026-2005		 CWE-122 Medium
No
No
 SC202604.1, SC202607.1, SC202607.2 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU122777 - Type confusion
CVE-2026-2004		 CWE-843 Medium
No
No
 SC202604.1, SC202607.1, SC202607.2 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 60 more
#VU122776 - Out-of-bounds read
CVE-2026-2003		 CWE-125 Medium
No
No
 SC202604.1, SC202607.1, SC202607.2 12.02.2026 SB2026021258
SB2026021302
SB2026021303
and 39 more
#VU121030 - Improper Authentication
CVE-2025-15224		 CWE-287 Low
No
No
 SC-202602.1, SC-202602.2 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 14 more
#VU121029 - Improper Validation of Certificate with Host Mismatch
CVE-2025-15079		 CWE-297 Low
No
No
 SC-202602.1, SC-202602.2 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 15 more
#VU121027 - Improper Certificate Validation
CVE-2025-14819		 CWE-295 Low
No
No
 SC-202602.1, SC-202602.2 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 16 more
#VU121026 - Insufficiently Protected Credentials
CVE-2025-14524		 CWE-522 Low
No
No
 SC-202602.1, SC-202602.2 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 23 more
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2025-14017		 CWE-567 Low
No
No
 SC-202602.1, SC-202602.2 07.01.2026 SB2026010741
SB2026010915
SB2026010935
and 15 more
#VU121024 - Protection Mechanism Failure
CVE-2025-13034		 CWE-693 Low
No
No
 SC-202602.1, SC-202602.2 07.01.2026 SB2026010741
SB2026012829
SB2026021026
and 3 more
#VU120272 - Missing release of memory after effective lifetime
CVE-2025-14177		 CWE-401 Medium
Available
No
 SC-202602.1, SC-202602.2 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 20 more
#VU120271 - Heap-based Buffer Overflow
CVE-2025-14178		 CWE-122 High
No
No
 SC-202602.1, SC-202602.2 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 33 more
#VU120270 - NULL Pointer Dereference
CVE-2025-14180		 CWE-476 Medium
No
No
 SC-202602.1, SC-202602.2 23.12.2025 SB2025122340
SB2025122342
SB2026010709
and 18 more
#VU116854 - Improper Access Control
CVE-2025-36636		 CWE-284 Medium
No
No
 6.7.0 09.10.2025 SB2025100908
#VU114096 - Improper input validation
CVE-2025-8715		 CWE-20 Medium
No
No
 SC-202509.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 53 more
#VU114095 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8714		 CWE-94 Low
Available
No
 SC-202509.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 63 more
#VU114094 - Permissions, Privileges, and Access Controls
CVE-2025-8713		 CWE-264 Low
No
No
 SC-202509.1 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 32 more
#VU113185 - Expected Behavior Violation
CVE-2025-54090		 CWE-440 Medium
No
No
 SC-202602.1, SC-202602.2 23.07.2025 SB2025072350
SB2025080808
SB2025081113
and 9 more
#VU108834 - Buffer over-read
CVE-2025-4207		 CWE-126 Medium
No
No
 SC-202509.1 09.05.2025 SB2025050920
SB2025051669
SB20250521157
and 40 more


Showing elements 1 - 20 out of 135