What’s Vulnerable › Products
Tenable.sc vulnerabilities
46 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Tenable.sc version is affected
Exploited Tenable.sc vulnerabilities
- CVE-2019-11043 — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
- CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)
Latest Tenable.sc vulnerabilities
- CVE-2023-0524 — (CVSS 8.8)
- CVE-2023-24495 — (CVSS 6.5)
- CVE-2023-24494 — (CVSS 5.4)
- CVE-2023-24493 — (CVSS 5.7)
- CVE-2023-0476 — (CVSS 6.5)
- CVE-2022-24828 — Missing input validation can lead to command execution in composer (CVSS 8.8)
- CVE-2022-24785 — Path Traversal in Moment.js (CVSS 7.5)
- CVE-2022-0130 — (CVSS 8.1)
- CVE-2021-44790 — Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (CVSS 9.8)
- CVE-2021-44224 — Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (CVSS 8.2)
- CVE-2021-21707 — Special characters break path parsing in XML functions (CVSS 5.3)
- CVE-2021-41184 — XSS in the `of` option of the `.position()` util (CVSS 6.1)
- CVE-2021-41183 — XSS in `*Text` options of the Datepicker widget (CVSS 6.1)
- CVE-2021-41182 — XSS in the `altField` option of the Datepicker widget (CVSS 6.1)
- CVE-2021-41116 — Command injection in composer on Windows (CVSS 9.8)
- CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF) (CVSS 9.0) — exploited
- CVE-2021-34798 — NULL pointer dereference in httpd core (CVSS 7.5)
- CVE-2021-3712 — Read buffer overruns processing ASN.1 strings (CVSS 7.4)
- CVE-2021-3711 — SM2 Decryption Buffer Overflow (CVSS 9.8)
- CVE-2021-33193 — Request splitting via HTTP/2 method injection and mod_proxy (CVSS 7.5)
- CVE-2021-23358 — Arbitrary Code Injection (CVSS 7.2)
- CVE-2021-3449 — NULL pointer deref in signature_algorithms processing (CVSS 5.9)
- CVE-2021-20076 — (CVSS 8.8)
- CVE-2021-23841 — Null pointer deref in X509_issuer_and_serial_hash() (CVSS 5.9)
- CVE-2020-5808 — (CVSS 7.5)