- How many CVEs does Tenable have?
- Tenable has 217 published CVE records since 2013, including 45 in the last two years.
- How many Tenable CVEs are in CISA KEV?
- Yes — 3 of Tenable's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Tenable products have the most CVEs?
- The Tenable products with the most published CVEs are Nessus, tenable.sc, Security Center, Nessus Agent, Nessus Network Monitor.
- What are the most common weakness types in Tenable CVEs?
- Tenable's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-190 (Integer Overflow or Wraparound), CWE-125 (Out-of-bounds Read).
- Are there public exploits for Tenable vulnerabilities?
- Yes — 60 of Tenable's CVEs have a known public exploit.
- How many critical Tenable vulnerabilities are there?
- Tenable has 31 critical and 87 high-severity CVEs.
- What is the average severity of Tenable CVEs?
- The average CVSS base score across Tenable's scored CVEs is 7.1.