[R1] Nessus Agent Version 8.3.5 Fixes Multiple Vulnerabilities

R1 Nessus Agent Version 8.3.5 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 03/09/2023 - 15:30 Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been ma...

[R1] Stand-alone Security Patch Available for Tenable.sc versions 5.16.0 to 5.19.1: Patch 202110.1

Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components Apache was found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution, and in line with best practice, Tenable opted to upgra...

[R1] LCE 5.1.1 Fixes Multiple Third-party Vulnerabilities

Log Correlation Engine leverages third-party software to help provide underlying functionality. One third-party component OpenSSL was found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with good practice, Tenable opted to...

[R3] Tenable Identity Exposure Version 3.93.5 Fixes Multiple Vulnerabilities

R3 Tenable Identity Exposure Version 3.93.5 Fixes Multiple Vulnerabilities Aaron Roy Tue, 06/23/2026 - 16:43 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components .NET Windows Server Hosting, NodeJS, Erlang OTP, SQ...

[R1] Security Center Version 6.5.1 Fixes Multiple Vulnerabilities

R1 Security Center Version 6.5.1 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 12/10/2024 - 11:22 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components PHP was found to contain vulnerabilities, and an updated version has been...

[R1] Stand-alone Security Patch Available for Tenable Security Center versions 5.23.1, 6.0.0, 6.1.0, 6.1.1, and 6.2.0: SC-202312.1

R1 Stand-alone Security Patch Available for Tenable Security Center versions 5.23.1, 6.0.0, 6.1.0, 6.1.1, and 6.2.0: SC-202312.1 Arnie Cabral Thu, 12/14/2023 - 10:41 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components Apache w...

[R2] Tenable.sc Version 6.1.0 Fixes Multiple Vulnerabilities

R2 Tenable.sc Version 6.1.0 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 03/22/2023 - 11:21 Tenable.sc leverages third-party software to help provide underlying functionality. Several of the third-party components in use Apache, PHP were found to contain vulnerabilities, and updated versions...

[R2] Nessus Agent Version 10.3.2 Fixes Multiple Vulnerabilities

R2 Nessus Agent Version 10.3.2 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 03/09/2023 - 14:18 Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been...

[R1] Nessus Agent Versions 8.3.3 and 10.1.3 Fix One Third-Party Vulnerability

R1 Nessus Agent Versions 8.3.3 and 10.1.3 Fix One Third-Party Vulnerability Arnie Cabral Thu, 03/31/2022 - 14:27 Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and an updated...

[R1] Nessus Agent Version 11.1.3 Fixes Arbitrary File Deletion

R1 Nessus Agent Version 11.1.3 Fixes Arbitrary File Deletion Jason Schavel Thu, 04/23/2026 - 14:10 A vulnerability has been identified in Nessus Agent on Windows where an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition...

[R1] Stand-alone Security Patch Available for Tenable Security Center version 6.5.1: SC-202504.3

R1 Stand-alone Security Patch Available for Tenable Security Center version 6.5.1: SC-202504.3 Arnie Cabral Mon, 04/21/2025 - 11:03 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components postgresql was found to contain...

[R1] Nessus Agent Version 10.4.4 Fixes One Vulnerability

R1 Nessus Agent Version 10.4.4 Fixes One Vulnerability Arnie Cabral Thu, 11/16/2023 - 10:53 An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host,...

[R1] Tenable.sc 5.22.0 Fixes One Third-Party Vulnerability

R1 Tenable.sc 5.22.0 Fixes One Third-Party Vulnerability Arnie Cabral Wed, 07/27/2022 - 18:26 Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components moment.js was found to contain vulnerabilities, and updated versions have been made...

[R1] Stand-alone Security Patch Available for Tenable.sc versions 5.19.0 to 5.21.0: Patch 202206.1

R1 Stand-alone Security Patch Available for Tenable.sc versions 5.19.0 to 5.21.0: Patch 202206.1 Arnie Cabral Thu, 06/30/2022 - 11:05 Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components Apache was found to contain vulnerabilities,...

[R1] Nessus Agent 8.3.0 Fixes One Vulnerability

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host...

[R1] Nessus Agent Versions 11.0.3 and 10.9.3 Fix One Vulnerability

R1 Nessus Agent Versions 11.0.3 and 10.9.3 Fix One Vulnerability Arnie Cabral Wed, 01/07/2026 - 08:47 A vulnerability has been identified in the installation/uninstallation of the Nessus Agent Tray App on Windows Hosts which could lead to escalation of privileges...

[R1] Nessus Agent Version 10.7.4 Fixes One Vulnerability

R1 Nessus Agent Version 10.7.4 Fixes One Vulnerability Arnie Cabral Wed, 04/02/2025 - 11:12 When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.7.4 did not enforce secure permissions for sub-directories. This could allow for local privilege...

[R1] Nessus Version 10.8.3 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.8.3 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 09/11/2024 - 15:19 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...

[R1] Nessus Network Monitor 6.3.1 Fixes Multiple Vulnerabilities

R1 Nessus Network Monitor 6.3.1 Fixes Multiple Vulnerabilities Jason Schavel Wed, 11/29/2023 - 16:00 Nessus Network Monitor leverages third-party software to help provide underlying functionality. Several of the third-party components HandlebarsJS, OpenSSL, and jquery-file-upload were found to...

[R2] Nessus Version 8.15.9 Fixes Multiple Vulnerabilities

R2 Nessus Version 8.15.9 Fixes Multiple Vulnerabilities Arnie Cabral Mon, 03/06/2023 - 18:07 Nessus leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been made availabl...

[R1] Nessus Network Monitor 6.0.1 Fixes Multiple Third-party Vulnerabilities

R1 Nessus Network Monitor 6.0.1 Fixes Multiple Third-party Vulnerabilities Arnie Cabral Mon, 05/09/2022 - 17:04 Nessus Network Monitor leverages third-party software to help provide underlying functionality. Several third-party components OpenSSL and jQuery UI were found to contain vulnerabilitie...

[R1] Nessus Versions 8.15.4 and 10.1.2 Fix One Third-Party Vulnerability

R1 Nessus Versions 8.15.4 and 10.1.2 Fix One Third-Party Vulnerability Arnie Cabral Wed, 03/30/2022 - 11:33 Nessus leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and an updated version has be...

[R2] Security Center Version 6.6.0 Fixes Multiple Vulnerabilities

R2 Security Center Version 6.6.0 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 05/06/2025 - 09:44 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components sqlite, ua-parser-js were found to contain vulnerabilities, and updat...

[R1] Tenable Identity Exposure Version 3.77.11 Fixes Multiple Vulnerabilities

R1 Tenable Identity Exposure Version 3.77.11 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 04/30/2025 - 00:26 Tenable Identity Exposure leverages third-party software to help provide underlying functionality. Several of the third-party components Erlang OTP, OpenSSL were found to contain...

[R1] Nessus Network Monitor 6.4.0 Fixes Multiple Vulnerabilities

R1 Nessus Network Monitor 6.4.0 Fixes Multiple Vulnerabilities Arnie Cabral Mon, 04/29/2024 - 11:40 Nessus Network Monitor leverages third-party software to help provide underlying functionality. Several of the third-party components hyperscan, curl and c-ares were found to contain vulnerabilitie...

[R1] Nessus Version 10.6.3 Fixes One Vulnerability

R1 Nessus Version 10.6.3 Fixes One Vulnerability Arnie Cabral Thu, 11/16/2023 - 10:23 An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the...

[R1] Nessus Version 10.5.2 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.5.2 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 05/11/2023 - 15:20 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components libxml2, libxslt were found to contain vulnerabilities, and updated versions have been...

[R1] Stand-alone Security Patch Available for Tenable.sc version 5.23.1: SC-202303.1-5

R1 Stand-alone Security Patch Available for Tenable.sc version 5.23.1: SC-202303.1-5 Arnie Cabral Wed, 03/01/2023 - 09:56 Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated...

[R1] Stand-alone Security Patch Available for Tenable.sc versions 5.22.0 to 5.23.1: SC-202302.3

R1 Stand-alone Security Patch Available for Tenable.sc versions 5.22.0 to 5.23.1: SC-202302.3 Arnie Cabral Tue, 02/21/2023 - 10:20 Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components in use libcurl was found to contain...

[R1] Tenable Plugin Feed ID #202212212055 Fixes Privilege Escalation Vulnerability

R1 Tenable Plugin Feed ID 202212212055 Fixes Privilege Escalation Vulnerability Arnie Cabral Mon, 01/30/2023 - 11:18 As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This could allow a malicious actor with sufficient permissions to...

[R1] Stand-alone Security Patch Available for Tenable.sc versions 5.19.0 to 5.21.0: Patch SC-202209.1

R1 Stand-alone Security Patch Available for Tenable.sc versions 5.19.0 to 5.21.0: Patch SC-202209.1 Arnie Cabral Wed, 09/07/2022 - 10:46 Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components moment.js was found to contain...

[R1] Tenable.sc 5.21.0 Fixes Multiple Third-Party Vulnerabilities

R1 Tenable.sc 5.21.0 Fixes Multiple Third-Party Vulnerabilities Arnie Cabral Tue, 04/19/2022 - 10:32 Tenable.sc leverages third-party software to help provide underlying functionality. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made...

[R1] Nessus 8.12.1 Fixes One Vulnerability

A vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows could allow an authenticated local attacker to copy user-supplied files to a specially constructed path in a specifically named user directory. An attacker could exploit this vulnerability by creating a malicious file and copying...

[R3] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1

R3 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1 Arnie Cabral Mon, 07/20/2026 - 13:01 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components apache, OpenSSL,...

[R2] Nessus Agent Version 10.8.3 Fixes One Vulnerability

R2 Nessus Agent Version 10.8.3 Fixes One Vulnerability Arnie Cabral Thu, 03/20/2025 - 11:44 When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-directories. This could allow for local privilege...

[R1] Stand-alone Security Patch Available for Tenable Security Center versions 6.2.1, 6.3.0 and 6.4.0: SC-202408.1

R1 Stand-alone Security Patch Available for Tenable Security Center versions 6.2.1, 6.3.0 and 6.4.0: SC-202408.1 Arnie Cabral Tue, 08/13/2024 - 10:51 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components Apache, libcurl were...

[R1] Stand-alone Security Patch Available for Security Center version 5.23.1: SC-202307.1-5.23.1

R1 Stand-alone Security Patch Available for Security Center version 5.23.1: SC-202307.1-5.23.1 Arnie Cabral Tue, 07/25/2023 - 11:11 Tenable Security Center leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain...

[R1] Sensor Proxy Version 1.0.7 Fixes Multiple Vulnerabilities

R1 Sensor Proxy Version 1.0.7 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 03/16/2023 - 11:55 Sensor Proxy leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been ma...

[R1] Stand-alone Security Patch Available for Tenable.sc version 6.0.0: SC-202303.1-6

R1 Stand-alone Security Patch Available for Tenable.sc version 6.0.0: SC-202303.1-6 Arnie Cabral Wed, 03/01/2023 - 08:50 Tenable.sc leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated...

[R1] Nessus Agent 8.2.3 Fixes Multiple Vulnerabilities

Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token. Additionally, one third-part...

[R2] Nessus Agent 8.2.0 Fixes One Vulnerability

A vulnerability in Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a specially constructed path in a specifically named user directory. The attacker needs valid credentials on the Windows system to...

[R2] SecurityCenter 5.8.0 Fixes Multiple Third-Party Vulnerabilities

SecurityCenter leverages third-party software to help provide underlying functionality. Two separate third-party components Apache Xalan and Serializer were found to contain vulnerabilities, and updated versions have been made available by the providers...

[R1] Nessus Agent Version 10.8.5 Fixes Multiple Vulnerabilities

R1 Nessus Agent Version 10.8.5 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 06/12/2025 - 09:53 1. In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite arbitrary local system files with log content at SYSTEM privilege. -...

[R1] Tenable Core on Oracle Linux 8 General Advisory

R1 Tenable Core on Oracle Linux 8 General Advisory Arnie Cabral Wed, 09/06/2023 - 06:19 Tenable Core is currently built on CentOS 7, which will be reaching end of life EoL on June 30, 2024. As a result of the approaching CentOS 7 EoL, Tenable Core is moving to Oracle Linux 8...

[R1] Nessus Version 10.5.4 Fixes Multiple Vulnerabilities

R1 Nessus Version 10.5.4 Fixes Multiple Vulnerabilities Jason Schavel Wed, 08/02/2023 - 11:15 Nessus leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been made availab...

[R1] Nessus Network Monitor Version 6.2.1 Fixes Multiple Vulnerabilities

R1 Nessus Network Monitor Version 6.2.1 Fixes Multiple Vulnerabilities Arnie Cabral Tue, 05/09/2023 - 11:12 Nessus Network Monitor leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, a...

[R1] Nessus Version 8.15.7 Fixes Multiple Vulnerabilities

R1 Nessus Version 8.15.7 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 11/09/2022 - 12:26 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components expat, libxml2, zlib were found to contain vulnerabilities, and updated versions have...

[R1] Nessus Network Monitor 5.13.1 Fixes Multiple Third-party Vulnerabilities

Nessus Network Monitor leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with good practice, Tenable...

[R2] Stand-alone Security Patches Available for Tenable.sc versions 5.13.0 to 5.17.0

Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution RCE on the Tenable.sc server via Hypertext Preprocessor unserialization. Additionally, one third-party componen...

[R2] SecurityCenter 5.7.0 Fixes Multiple Vulnerabilities

SecurityCenter leverages third-party software to help provide underlying functionality. Two separate third-party components PHP and jQuery were found to contain vulnerabilities, and updated versions have been made available by the providers...