Tenable Security Nessus

Name: Tenable Security Nessus
Brand: Tenable Security

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

7critical18high9medium3low

updated 2026-10-27

vulnerabilities (62)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-3786US	high7.5	92.5% (100th)	Exploit	network monitor 6.1.1	2022-11-01	2 versions
CVE-2022-3602US	high7.5	90.8% (100th)	Exploit	network monitor 6.1.1	2022-11-01	2 versions
CVE-2022-24785US	high7.5	13.8% (97th)	Exploit	10.3.1	2022-04-04	< 10.3.1
CVE-2020-7656US	medium6.1	6.43% (94th)	Exploit	10.5.0	2020-05-19	< 10.5.0
CVE-2020-28458US	high7.3	3.72% (90th)	Exploit	10.3.1	2020-12-16	< 10.3.1
CVE-2024-45490US	high7.5	1.69% (77th)	Exploit	10.8.3	2024-08-30	3 versions
CVE-2019-10909US	medium5.4	1.03% (63rd)	Exploit	10.5.0	2019-05-16	< 10.5.0
CVE-2026-57588US	—	0.33% (26th)	Exploit	10.12.1	2026-06-25	< 10.12.1
CVE-2018-0732US	high7.5	47.0% (99th)	—	8.0.0	2018-06-12	< 8.0.0
CVE-2016-0718US	critical9.8	13.3% (96th)	—	6.8	2016-05-26	< 6.8
CVE-2018-0737US	medium5.9OT elevated	11.6% (96th)	—	8	2018-04-16	< 8
CVE-2019-10910US	critical9.8	6.02% (93rd)	—	10.5.0	2019-05-16	< 10.5.0
CVE-2023-45853US	critical9.8	3.45% (89th)	—	10.6.2	2023-10-14	< 10.6.2
CVE-2021-23839US	low3.7OT elevated	2.96% (87th)	—	no fix	2021-02-16	≤ Agent <8.2.3
CVE-2020-28477US	medium5.0	2.34% (84th)	—	10.3.1	2021-01-19	< 10.3.1
CVE-2022-1650US	critical9.3	1.86% (79th)	—	10.3.1	2022-05-12	< 10.3.1
CVE-2023-0401US	high7.5	1.85% (79th)	—	10.5.0	2023-02-08	3 versions
CVE-2023-0217US	high7.5	1.85% (79th)	—	10.5.0	2023-02-08	3 versions
CVE-2023-0216US	high7.5	1.85% (79th)	—	10.5.0	2023-02-08	3 versions
CVE-2020-25657US	medium5.9	1.76% (78th)	—	10.3.1	2021-01-12	< 10.3.1
CVE-2019-20921US	medium6.1	1.74% (78th)	—	10.3.1	2020-09-30	< 10.3.1
CVE-2022-29225US	high7.5	1.58% (75th)	—	10.3.1	2022-06-09	< 10.3.1
CVE-2023-4807US	high7.8	1.58% (75th)	—	10.5.6	2023-09-08	2 versions
CVE-2025-49796US	—	1.56% (75th)	—	10.9.0	2025-06-16	4 versions
CVE-2024-45492US	critical9.8	1.39% (72nd)	—	10.8.3	2024-08-30	3 versions
CVE-2022-4203US	medium4.9	1.39% (72nd)	—	10.5.0	2023-02-24	3 versions
CVE-2025-6021US	—	1.37% (72nd)	—	10.9.0	2025-06-12	4 versions
CVE-2022-29226US	critical9.1OT elevated	1.33% (71st)	—	10.3.1	2022-06-09	< 10.3.1
CVE-2022-29228US	high7.5	1.26% (70th)	—	10.3.1	2022-06-09	< 10.3.1
CVE-2019-10911US	high7.5	1.21% (68th)	—	10.5.0	2019-05-16	< 10.5.0
CVE-2022-31045US	critical9.8	1.18% (68th)	—	10.3.1	2022-06-09	< 10.3.1
CVE-2022-29224US	medium5.9	1.02% (63rd)	—	10.3.1	2022-06-09	< 10.3.1
CVE-2023-1255US	medium5.9	0.95% (61st)	—	10.5.3	2023-04-20	2 versions
CVE-2025-49794US	—	0.83% (57th)	—	10.8.5	2025-06-16	4 versions
CVE-2025-49795US	—	0.59% (48th)	—	10.8.5	2025-06-16	4 versions
CVE-2026-15265US	—	0.56% (46th)	—	no fix	2026-07-14	2 versions
CVE-2026-57587US	—	0.45% (39th)	—	10.12.1	2026-06-25	< 10.12.1
CVE-2025-7425US	—	0.44% (38th)	—	10.9.6	2025-07-10	2 versions
CVE-2026-103946US	—	0.44% (38th)	—	10.12.5	2026-10-14	< 10.12.5
CVE-2025-6170US	low2.5	0.32% (25th)	—	10.9.6	2025-06-16	2 versions
CVE-2025-36625US	—	0.29% (22nd)	—	10.8.4	2025-04-18	< 10.8.4
CVE-2026-25210US	high7.8	0.21% (11th)	—	10.10.2	2026-01-30	2 versions
CVE-2025-36632US	—OT elevated	0.20% (10th)	—	no fix	2025-06-16	≤ Agent <10.8.5
CVE-2024-2390US	—	0.19% (9th)	—	no fix	2024-03-18	≤ plugin feed <202403142053
CVE-2025-36630US	high7.1	0.19% (8th)	—	10.8.5	2025-07-02	< 10.8.5
CVE-2025-24915US	—OT elevated	0.19% (8th)	—	no fix	2025-03-21	2 versions
CVE-2026-24515US	low2.5	0.19% (8th)	—	10.10.2	2026-01-23	2 versions
CVE-2025-36633US	high7.8	0.18% (8th)	—	no fix	2025-06-13	≤ Agent <10.8.5
CVE-2025-36631US	high7.8	0.17% (7th)	—	no fix	2025-06-13	≤ Agent <10.8.5
CVE-2026-33694US	high7.8	0.15% (4th)	—	10.12.0	2026-04-23	3 versions

showing 50 of 62

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference6 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-269Improper Privilege Management5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-276Incorrect Default Permissions4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)62 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan