How many CVEs does Tenable nessus have?

Tenable nessus has 74 published CVE records since 2014.

How many Tenable nessus CVEs are in CISA KEV?

None of Tenable nessus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Tenable nessus vulnerabilities?

Yes — 9 of Tenable nessus's CVEs have a known public exploit.

Which versions of Tenable nessus are affected?

141 distinct Tenable nessus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Tenable nessus CVEs?

Tenable nessus's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-190 (Integer Overflow or Wraparound), CWE-269 (Improper Privilege Management), CWE-732 (Incorrect Permission Assignment for Critical Resource).

How many critical Tenable nessus vulnerabilities are there?

Tenable nessus has 4 critical and 31 high-severity CVEs.

What is the average severity of Tenable nessus CVEs?

The average CVSS base score across Tenable nessus's scored CVEs is 6.8.

Tenable nessus Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Tenable nessus version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

6.8.01 CVE
6.8.11 CVE
6.9.01 CVE
6.9.11 CVE
6.9.21 CVE

Version ranges

< 8.15.310 CVEs
10.0.0 <= v < 10.1.110 CVEs
6.10.0 <= v <= 6.10.04 CVEs
6.10.1 <= v <= 6.10.14 CVEs
6.10.2 <= v <= 6.10.24 CVEs
6.10.3 <= v <= 6.10.34 CVEs
6.8.1 <= v <= 6.8.14 CVEs
< 10.2.03 CVEs
< 10.6.03 CVEs
<= 8.2.33 CVEs
6.10.4 <= v <= 6.10.43 CVEs
6.8.0 <= v <= 6.8.03 CVEs
6.9.0 <= v <= 6.9.03 CVEs
6.9.1 <= v <= 6.9.13 CVEs
6.9.2 <= v <= 6.9.23 CVEs
< 10.12.12 CVEs
< 10.6.22 CVEs
< 10.7.02 CVEs
< 10.7.32 CVEs
< 10.8.42 CVEs
< 6.8.02 CVEs
< 7.1.02 CVEs
<= 10.7.22 CVEs
<= 8.13.12 CVEs
6.6.2 <= v <= 6.6.22 CVEs
6.9.3 <= v <= 6.9.32 CVEs
< #2024031420531 CVE
< 10.12.51 CVE
< 10.4.01 CVE
< 10.4.21 CVE
< 10.4.41 CVE
< 10.5.71 CVE
< 10.8.51 CVE
< 7.0.31 CVE
< 8.1.11 CVE
< 8.15.01 CVE
< 8.15.41 CVE
< 8.2.51 CVE
< 8.5.01 CVE
< Plugin Feed ID #2023062612021 CVE
<= 10.11.31 CVE
<= 6.10.11 CVE
<= 6.8.11 CVE
<= 6.9.21 CVE
<= 8.10.01 CVE
<= 8.11.01 CVE
<= 8.13.21 CVE
<= 8.15.21 CVE
<= 8.2.11 CVE
<= 8.2.41 CVE
<= 8.2.51 CVE
<= 8.4.01 CVE
<= 8.5.21 CVE
<= 8.6.01 CVE
>= 10.5.71 CVE
>= 6.x before 6.111 CVE
>= All versions prior to 7.0.31 CVE
>= All versions prior to 8.5.01 CVE
10.0.0 <= v < 10.1.21 CVE
10.0.0 <= v < 10.4.21 CVE
10.6.0 <= v < 10.6.31 CVE
5.2.1 <= v <= 5.2.11 CVE
5.2.3 <= v <= 5.2.31 CVE
5.2.4 <= v <= 5.2.41 CVE
5.2.5 <= v <= 5.2.51 CVE
5.2.6 <= v <= 5.2.61 CVE
5.2.7 <= v <= 5.2.71 CVE
6.0.0 <= v <= 6.0.01 CVE
6.0.1 <= v <= 6.0.11 CVE
6.0.2 <= v <= 6.0.21 CVE
6.1.0 <= v <= 6.1.01 CVE
6.1.1 <= v <= 6.1.11 CVE
6.1.2 <= v <= 6.1.21 CVE
6.10.5 <= v <= 6.10.51 CVE
6.10.6 <= v <= 6.10.61 CVE
6.10.7 <= v <= 6.10.71 CVE
6.10.8 <= v <= 6.10.81 CVE
6.10.9 <= v <= 6.10.91 CVE
6.2.0 <= v <= 6.2.01 CVE
6.2.1 <= v <= 6.2.11 CVE
6.3.0 <= v <= 6.3.01 CVE
6.3.1 <= v <= 6.3.11 CVE
6.3.2 <= v <= 6.3.21 CVE
6.3.3 <= v <= 6.3.31 CVE
6.3.4 <= v <= 6.3.41 CVE
6.3.5 <= v <= 6.3.51 CVE
6.3.6 <= v <= 6.3.61 CVE
6.3.7 <= v <= 6.3.71 CVE
6.4.0 <= v <= 6.4.01 CVE
6.4.1 <= v <= 6.4.11 CVE
6.4.2 <= v <= 6.4.21 CVE
6.4.3 <= v <= 6.4.31 CVE
6.5.0 <= v <= 6.5.01 CVE
6.5.1 <= v <= 6.5.11 CVE
6.5.2 <= v <= 6.5.21 CVE
6.5.3 <= v <= 6.5.31 CVE
6.5.4 <= v <= 6.5.41 CVE
6.5.5 <= v <= 6.5.51 CVE
6.5.6 <= v <= 6.5.61 CVE
6.6.0 <= v <= 6.6.01 CVE
6.6.1 <= v <= 6.6.11 CVE
6.7 <= v <= 6.71 CVE
6.7.0 <= v <= 6.7.01 CVE
6.8 <= v <= 6.81 CVE
6.8.2 <= v <= 6.8.21 CVE
6.9 <= v <= 6.91 CVE
8.10.1 <= v < 8.15.81 CVE
8.9.0 <= v <= 8.12.01 CVE

Fixed in

10.1.110 CVEs
8.15.310 CVEs
10.2.03 CVEs
10.6.03 CVEs
10.12.12 CVEs
10.4.22 CVEs
10.6.22 CVEs
10.7.02 CVEs
10.7.32 CVEs
10.8.42 CVEs
6.8.02 CVEs
7.1.02 CVEs
#2024031420531 CVE
10.1.21 CVE

Find a version

74 CVEs

Sort

SQL Injection
CVE-2026-103946
Patch
CWE-89
High · CVSS 8.7
EPSS 0.4% (30th pct)2026-10-14
SQL Injection in Nessus via Malicious Scan Result File Import
CVE-2026-57588
Public exploit
Patch
CWE-89
Low · CVSS 1.6
EPSS 0.3% (25th pct)2026-06-25
SQL Injection in Nessus via Reverse DNS Lookup
CVE-2026-57587
Patch
CWE-89
Low · CVSS 2.1
EPSS 0.4% (37th pct)2026-06-25
Junction File Manipulation
CVE-2026-33694CWE-59
High · CVSS 7.4
EPSS 0.2% (9th pct)2026-04-23
Local Privilege Escalation
CVE-2025-36630
Patch
CWE-269
High · CVSS 8.4
EPSS 0.2% (8th pct)2025-07-01
Log Poisoning in Nessus
CVE-2025-36625
Patch
CWE-117
Medium · CVSS 4.3
EPSS 0.3% (20th pct)2025-04-18
Local Priviledge Escalation
CVE-2025-24914
Patch
CWE-276
High · CVSS 7.8
EPSS 0.2% (4th pct)2025-04-18
High vulnerability · 2024-05-17
CVE-2024-3290
Patch
CWE-367
High · CVSS 8.2
EPSS 0.2% (7th pct)2024-05-17
High vulnerability · 2024-05-17
CVE-2024-3289
Patch
CWE-281
High · CVSS 7.8
EPSS 0.2% (8th pct)2024-05-17
Local Privilege Escalation
CVE-2024-2390
Patch
CWE-269
High · CVSS 7.8
EPSS 0.2% (9th pct)2024-03-18
Medium vulnerability · 2024-02-06
CVE-2024-0971
Patch
CWE-89
Medium · CVSS 6.5
EPSS 0.8% (55th pct)2024-02-06
Medium vulnerability · 2024-02-06
CVE-2024-0955
Patch
CWE-20
Medium · CVSS 4.8
EPSS 0.6% (45th pct)2024-02-06
Medium vulnerability · 2023-11-20
CVE-2023-6178
Patch
CWE-787
Medium · CVSS 6.8
EPSS 0.8% (57th pct)2023-11-20
Medium vulnerability · 2023-11-20
CVE-2023-6062
Patch
CWE-787
Medium · CVSS 6.8
EPSS 1.0% (63th pct)2023-11-20
High vulnerability · 2023-11-01
CVE-2023-5847
Patch
CWE-269
High · CVSS 7.3
EPSS 0.2% (12th pct)2023-11-01
Medium vulnerability · 2023-08-29
CVE-2023-3253
Patch
CWE-863
Medium · CVSS 4.3
EPSS 0.5% (43th pct)2023-08-29
Medium vulnerability · 2023-08-29
CVE-2023-3252
Patch
CWE-427
Medium · CVSS 6.8
EPSS 0.8% (56th pct)2023-08-29
Medium vulnerability · 2023-08-29
CVE-2023-3251
Patch
CWE-522
Medium · CVSS 4.9
EPSS 0.6% (48th pct)2023-08-29
High vulnerability · 2023-06-26
CVE-2023-2005
Patch
CWE-427
High · CVSS 8.8
EPSS 0.4% (30th pct)2023-06-26
High vulnerability · 2023-03-15
CVE-2022-4313
Patch
CWE-427
High · CVSS 8.8
EPSS 1.2% (69th pct)2023-03-15
High vulnerability · 2023-02-01
CVE-2023-0524CWE-269
High · CVSS 8.8
EPSS 0.6% (50th pct)2023-02-01
High vulnerability · 2023-01-20
CVE-2023-0101
Patch
CWE-269
High · CVSS 8.8
EPSS 0.8% (56th pct)2023-01-20
Medium vulnerability · 2022-10-31
CVE-2022-3499
Patch
CWE-532
Medium · CVSS 6.5
EPSS 0.9% (58th pct)2022-10-31
Medium vulnerability · 2022-10-24
CVE-2022-33757
Patch
CWE-284
Medium · CVSS 6.5
EPSS 0.9% (58th pct)2022-10-24
Medium vulnerability · 2022-10-17
CVE-2022-28291
Public exploit
CWE-522
Medium · CVSS 6.5
EPSS 0.8% (55th pct)2022-10-17
Medium vulnerability · 2022-06-21
CVE-2022-32974
Patch
Medium · CVSS 6.5
EPSS 0.7% (54th pct)2022-06-21
High vulnerability · 2022-06-21
CVE-2022-32973
Patch
High · CVSS 8.8
EPSS 1.4% (71th pct)2022-06-21
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
CVE-2022-0778
Public exploit
Patch
CWE-835
High · CVSS 7.5
EPSS 73.2% (99th pct)2022-03-15
High vulnerability · 2022-01-26
CVE-2022-23990
Patch
CWE-190
High · CVSS 7.5
EPSS 4.7% (92th pct)2022-01-26
Critical vulnerability · 2022-01-24
CVE-2022-23852
Patch
CWE-190
Critical · CVSS 9.8
EPSS 5.1% (92th pct)2022-01-24

Showing 30 of 74

Tenable nessus Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Tenable products

Frequently asked questions

References

Track Tenable nessus vulnerabilities