Tenable Nessus

• CVE-2026-57588 Low 3.3 SQL Injection in Nessus via Malicious Scan Result File Import 0.3%
• CVE-2026-57587 Medium 5.3 SQL Injection in Nessus via Reverse DNS Lookup 0.4%
• CVE-2025-36630 High 8.4 Local Privilege Escalation 0.2%
• CVE-2025-36625 Medium 4.3 Log Poisoning in Nessus 0.3%
• CVE-2025-24914 High 7.8 Local Priviledge Escalation 0.2%
• CVE-2024-3290 High 8.2 Race Condition 0.2%
• CVE-2024-3289 High 7.8 When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories. This could allow for lo 0.2%
• CVE-2024-2390 High 7.8 Local Privilege Escalation 0.2%
• CVE-2024-0971 Medium 6.5 A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content. 0.8%
• CVE-2024-0955 Medium 4.8 Stored XSS vulnerability 0.6%
• CVE-2023-6062 Medium 6.8 Arbitrary File Write 1.0%
• CVE-2023-5847 Medium 6.7 Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts. 0.2%
• CVE-2023-3253 Medium 4.3 Improper authorization in Nessus 0.5%
• CVE-2023-3252 Medium 6.8 Arbitrary File Write 0.8%
• CVE-2023-3251 Medium 4.1 Pass-back vulnerability in Nessus 0.7%
• CVE-2023-2005 Medium 6.3 Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability 0.4%