Tenable Nessus

Name: Tenable Nessus
Brand: Tenable

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical5high5medium1low

updated 2026-10-28

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-57588US	—	0.33% (26th)	Exploit	no fix	2026-06-25	≤ prior to 10.12.1
CVE-2023-6062US	medium6.5	1.03% (64th)	—	10.6.2	2023-11-20	2 versions
CVE-2019-3962US	low3.3	0.95% (61st)	—	no fix	2019-07-01	≤ All versions prior to 8.5.0
CVE-2024-0971US	medium6.5	0.78% (56th)	—	10.7.0	2024-02-07	2 versions
CVE-2023-3251US	medium4.9	0.61% (49th)	—	10.6.0	2023-08-29	0 → 10.6.0
CVE-2017-11506US	high7.4	0.57% (47th)	—	no fix	2017-08-09	≤ 6.x before 6.11
CVE-2024-0955US	medium4.8	0.56% (46th)	—	10.7.0	2024-02-07	2 versions
CVE-2023-3253US	medium4.3OT elevated	0.52% (44th)	—	10.6.0	2023-08-29	0 → 10.6.0
CVE-2026-57587US	—	0.45% (39th)	—	no fix	2026-06-25	≤ prior to 10.12.1
CVE-2023-2005US	high8.8	0.38% (32nd)	—	Plugin Feed ID #202306261202	2023-06-26	0 → Plugin Feed ID #202306261202
CVE-2025-36625US	—	0.29% (22nd)	—	10.8.4	2025-04-18	0 → 10.8.4
CVE-2018-1141US	high7.0	0.23% (14th)	—	no fix	2018-03-20	≤ All versions prior to 7.0.3
CVE-2023-5847US	high7.3	0.22% (13th)	—	10.6.2	2023-11-01	0 → 10.6.2
CVE-2024-2390US	—	0.19% (9th)	—	#202403142053	2024-03-18	2 versions
CVE-2025-36630US	high7.1	0.19% (8th)	—	10.8.5	2025-07-02	0 → 10.8.5
CVE-2024-3289US	—	0.18% (8th)	—	10.7.3	2024-05-17	0 → 10.7.3
CVE-2024-3290US	—	0.18% (8th)	—	10.7.3	2024-05-17	0 → 10.7.3
CVE-2025-24914US	—OT elevated	0.15% (4th)	—	10.8.4	2025-04-18	0 → 10.8.4

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-117Improper Output Neutralization for Logs1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-281Improper Preservation of Permissions1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.