Known vulnerabilities in Tenable Nessus - page 5

Software CPE: cpe:2.3:a:tenable_network_security:tenable_nessus:*:*:*:*:*:*:*:*
Total vulnerabilities: 104
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Tenable Nessus Tenable Nessus is affected by 104 known vulnerabilities: 29 high, 45 medium, 30 low Critical High Medium Low

Vulnerabilities (104)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59643 - Integer overflow
CVE-2021-46143
CWE-190 High
No
No
8.15.3, 10.1.1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 58 more
#VU59642 - Resource exhaustion
CVE-2021-45960
CWE-400 Medium
No
No
8.15.3, 10.1.1 17.01.2022 SB2022011711
SB2022011713
SB2022020902
and 56 more
#VU57847 - Permissions, Privileges, and Access Controls
CVE-2021-20135
CWE-264 Low
No
No
10.0.0 01.11.2021 SB2021110115
#VU54453 - Permissions, Privileges, and Access Controls
CVE-2021-20100
CWE-264 Low
No
No
8.15.0 30.06.2021 SB2021063011
SB2021063012
#VU54452 - Permissions, Privileges, and Access Controls
CVE-2021-20099
CWE-264 Low
No
No
8.15.0 30.06.2021 SB2021063011
SB2021063012
#VU51945 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23358
CWE-94 High
No
No
10.1.0 06.04.2021 SB2021040623
SB2021040624
SB2021050609
and 20 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449
CWE-476 Medium
Available
No
8.13.2 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450
CWE-254 Medium
No
No
8.13.2 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU51578 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20077
CWE-200 Low
No
No
8.14.0 19.03.2021 SB2021031901
SB2021040621
#VU48078 - Improper input validation
CVE-2020-5793
CWE-20 Low
No
No
8.1.1, 8.2.0, 8.12.1 02.11.2020 SB2020110213
#VU45888 - Insufficient Session Expiration
CVE-2020-5774
CWE-613 Low
No
No
8.11.1 21.08.2020 SB2020082101
#VU23188 - Divide By Zero
CVE-2019-16168
CWE-369 Low
Available
No
8.15.0 02.12.2019 SB2019120212
SB2019100934
SB2019100935
and 25 more
#VU21091 - Out-of-bounds read
CVE-2019-15903
CWE-125 Medium
Available
No
8.15.0 12.09.2019 SB2019091209
SB2019091210
SB2019091701
and 61 more
#VU20268 - Improper input validation
CVE-2019-3974
CWE-20 Low
No
No
8.6.0 14.08.2019 SB2019081406
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843
CWE-611 Medium
Available
No
8.15.0 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more
#VU18918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-3961
CWE-79 Low
No
No
8.5.0 25.06.2019 SB2019062518
#VU17360 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-3923
CWE-79 Low
No
No
8.2.2 04.02.2019 SB2019020402
#VU12745 - Session Fixation
CVE-2018-1148
CWE-384 Low
No
No
- 16.05.2018 SB2018051603
#VU12744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1147
CWE-79 Low
No
No
- 16.05.2018 SB2018051603
#VU12365 - Improper input validation
CWE-20 High
No
No
- 05.05.2018 SB2018050501


Showing elements 81 - 100 out of 104