How many CVEs does Tenable nessus have?

Tenable nessus has 72 published CVE records since 2014.

How many Tenable nessus CVEs are in CISA KEV?

None of Tenable nessus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Tenable nessus vulnerabilities?

Yes — 7 of Tenable nessus's CVEs have a known public exploit.

Which versions of Tenable nessus are affected?

139 distinct Tenable nessus versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Tenable nessus CVEs?

Tenable nessus's CVEs most often map to these CWE weakness types: CWE-190 (Integer Overflow or Wraparound), CWE-269 (Improper Privilege Management), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-427 (Uncontrolled Search Path Element).

How many critical Tenable nessus vulnerabilities are there?

Tenable nessus has 4 critical and 29 high-severity CVEs.

What is the average severity of Tenable nessus CVEs?

The average CVSS base score across Tenable nessus's scored CVEs is 6.8.

Tenable nessus Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Tenable nessus version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

6.8.01 CVE
6.8.11 CVE
6.9.01 CVE
6.9.11 CVE
6.9.21 CVE

Version ranges

< 8.15.310 CVEs
10.0.0 <= v < 10.1.110 CVEs
6.10.0 <= v <= 6.10.04 CVEs
6.10.1 <= v <= 6.10.14 CVEs
6.10.2 <= v <= 6.10.24 CVEs
6.10.3 <= v <= 6.10.34 CVEs
6.8.1 <= v <= 6.8.14 CVEs
< 10.2.03 CVEs
< 10.6.03 CVEs
<= 8.2.33 CVEs
6.10.4 <= v <= 6.10.43 CVEs
6.8.0 <= v <= 6.8.03 CVEs
6.9.0 <= v <= 6.9.03 CVEs
6.9.1 <= v <= 6.9.13 CVEs
6.9.2 <= v <= 6.9.23 CVEs
< 10.12.12 CVEs
< 10.6.22 CVEs
< 10.7.02 CVEs
< 10.7.32 CVEs
< 10.8.42 CVEs
< 6.8.02 CVEs
< 7.1.02 CVEs
<= 10.7.22 CVEs
<= 8.13.12 CVEs
6.6.2 <= v <= 6.6.22 CVEs
6.9.3 <= v <= 6.9.32 CVEs
< #2024031420531 CVE
< 10.4.01 CVE
< 10.4.21 CVE
< 10.4.41 CVE
< 10.5.71 CVE
< 10.8.51 CVE
< 7.0.31 CVE
< 8.1.11 CVE
< 8.15.01 CVE
< 8.15.41 CVE
< 8.2.51 CVE
< 8.5.01 CVE
< Plugin Feed ID #2023062612021 CVE
<= 6.10.11 CVE
<= 6.8.11 CVE
<= 6.9.21 CVE
<= 8.10.01 CVE
<= 8.11.01 CVE
<= 8.13.21 CVE
<= 8.15.21 CVE
<= 8.2.11 CVE
<= 8.2.41 CVE
<= 8.2.51 CVE
<= 8.4.01 CVE
<= 8.5.21 CVE
<= 8.6.01 CVE
>= 10.5.71 CVE
>= 6.x before 6.111 CVE
>= All versions prior to 7.0.31 CVE
>= All versions prior to 8.5.01 CVE
10.0.0 <= v < 10.1.21 CVE
10.0.0 <= v < 10.4.21 CVE
10.6.0 <= v < 10.6.31 CVE
5.2.1 <= v <= 5.2.11 CVE
5.2.3 <= v <= 5.2.31 CVE
5.2.4 <= v <= 5.2.41 CVE
5.2.5 <= v <= 5.2.51 CVE
5.2.6 <= v <= 5.2.61 CVE
5.2.7 <= v <= 5.2.71 CVE
6.0.0 <= v <= 6.0.01 CVE
6.0.1 <= v <= 6.0.11 CVE
6.0.2 <= v <= 6.0.21 CVE
6.1.0 <= v <= 6.1.01 CVE
6.1.1 <= v <= 6.1.11 CVE
6.1.2 <= v <= 6.1.21 CVE
6.10.5 <= v <= 6.10.51 CVE
6.10.6 <= v <= 6.10.61 CVE
6.10.7 <= v <= 6.10.71 CVE
6.10.8 <= v <= 6.10.81 CVE
6.10.9 <= v <= 6.10.91 CVE
6.2.0 <= v <= 6.2.01 CVE
6.2.1 <= v <= 6.2.11 CVE
6.3.0 <= v <= 6.3.01 CVE
6.3.1 <= v <= 6.3.11 CVE
6.3.2 <= v <= 6.3.21 CVE
6.3.3 <= v <= 6.3.31 CVE
6.3.4 <= v <= 6.3.41 CVE
6.3.5 <= v <= 6.3.51 CVE
6.3.6 <= v <= 6.3.61 CVE
6.3.7 <= v <= 6.3.71 CVE
6.4.0 <= v <= 6.4.01 CVE
6.4.1 <= v <= 6.4.11 CVE
6.4.2 <= v <= 6.4.21 CVE
6.4.3 <= v <= 6.4.31 CVE
6.5.0 <= v <= 6.5.01 CVE
6.5.1 <= v <= 6.5.11 CVE
6.5.2 <= v <= 6.5.21 CVE
6.5.3 <= v <= 6.5.31 CVE
6.5.4 <= v <= 6.5.41 CVE
6.5.5 <= v <= 6.5.51 CVE
6.5.6 <= v <= 6.5.61 CVE
6.6.0 <= v <= 6.6.01 CVE
6.6.1 <= v <= 6.6.11 CVE
6.7 <= v <= 6.71 CVE
6.7.0 <= v <= 6.7.01 CVE
6.8 <= v <= 6.81 CVE
6.8.2 <= v <= 6.8.21 CVE
6.9 <= v <= 6.91 CVE
8.10.1 <= v < 8.15.81 CVE
8.9.0 <= v <= 8.12.01 CVE

Fixed in

10.1.110 CVEs
8.15.310 CVEs
10.2.03 CVEs
10.6.03 CVEs
> 10.7.22 CVEs
10.12.12 CVEs
10.4.22 CVEs
10.6.22 CVEs
10.7.02 CVEs
10.7.32 CVEs
10.8.42 CVEs
6.8.02 CVEs
7.1.02 CVEs
#2024031420531 CVE

Find a version

72 CVEs

Sort

SQL Injection in Nessus via Malicious Scan Result File Import
CVE-2026-57588
Public exploit
Patch
CWE-89
Low · CVSS 1.6
EPSS 0.3% (27th pct)2026-06-25
SQL Injection in Nessus via Reverse DNS Lookup
CVE-2026-57587
Patch
CWE-89
Low · CVSS 2.1
EPSS 0.4% (28th pct)2026-06-25
Local Privilege Escalation
CVE-2025-36630
Patch
CWE-269
High · CVSS 8.4
EPSS 0.2% (8th pct)2025-07-01
Log Poisoning in Nessus
CVE-2025-36625
Patch
CWE-117
Medium · CVSS 4.3
EPSS 0.3% (20th pct)2025-04-18
Local Priviledge Escalation
CVE-2025-24914
Patch
CWE-276
High · CVSS 7.8
EPSS 0.1% (4th pct)2025-04-18
High vulnerability · 2024-05-17
CVE-2024-3290
Patch
CWE-367
High · CVSS 8.2
EPSS 0.2% (8th pct)2024-05-17
High vulnerability · 2024-05-17
CVE-2024-3289
Patch
CWE-281
High · CVSS 7.8
EPSS 0.2% (8th pct)2024-05-17
Local Privilege Escalation
CVE-2024-2390
Patch
CWE-269
High · CVSS 7.8
EPSS 0.2% (10th pct)2024-03-18
Medium vulnerability · 2024-02-06
CVE-2024-0971
Patch
CWE-89
Medium · CVSS 6.5
EPSS 0.8% (52th pct)2024-02-06
Medium vulnerability · 2024-02-06
CVE-2024-0955
Patch
CWE-20
Medium · CVSS 4.8
EPSS 0.6% (43th pct)2024-02-06
Medium vulnerability · 2023-11-20
CVE-2023-6178
Patch
Medium · CVSS 6.8
EPSS 0.8% (54th pct)2023-11-20
Medium vulnerability · 2023-11-20
CVE-2023-6062
Patch
Medium · CVSS 6.8
EPSS 1.0% (60th pct)2023-11-20
High vulnerability · 2023-11-01
CVE-2023-5847
Patch
CWE-269
High · CVSS 7.3
EPSS 0.2% (13th pct)2023-11-01
Medium vulnerability · 2023-08-29
CVE-2023-3253
Patch
CWE-863
Medium · CVSS 4.3
EPSS 0.4% (32th pct)2023-08-29
Medium vulnerability · 2023-08-29
CVE-2023-3252
Patch
CWE-427
Medium · CVSS 6.8
EPSS 0.6% (45th pct)2023-08-29
Medium vulnerability · 2023-08-29
CVE-2023-3251
Patch
CWE-522
Medium · CVSS 4.9
EPSS 0.5% (37th pct)2023-08-29
High vulnerability · 2023-06-26
CVE-2023-2005
Patch
CWE-427
High · CVSS 8.8
EPSS 0.4% (30th pct)2023-06-26
High vulnerability · 2023-03-15
CVE-2022-4313
Patch
CWE-427
High · CVSS 8.8
EPSS 1.2% (66th pct)2023-03-15
High vulnerability · 2023-02-01
CVE-2023-0524CWE-269
High · CVSS 8.8
EPSS 0.6% (47th pct)2023-02-01
High vulnerability · 2023-01-20
CVE-2023-0101
Patch
CWE-269
High · CVSS 8.8
EPSS 0.8% (54th pct)2023-01-20
Medium vulnerability · 2022-10-31
CVE-2022-3499
Patch
CWE-532
Medium · CVSS 6.5
EPSS 0.8% (52th pct)2022-10-31
Medium vulnerability · 2022-10-24
CVE-2022-33757
Patch
CWE-284
Medium · CVSS 6.5
EPSS 0.8% (52th pct)2022-10-24
Medium vulnerability · 2022-10-17
CVE-2022-28291CWE-522
Medium · CVSS 6.5
EPSS 0.7% (47th pct)2022-10-17
Medium vulnerability · 2022-06-21
CVE-2022-32974
Patch
Medium · CVSS 6.5
EPSS 0.7% (50th pct)2022-06-21
High vulnerability · 2022-06-21
CVE-2022-32973
Patch
High · CVSS 8.8
EPSS 1.3% (66th pct)2022-06-21
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
CVE-2022-0778
Public exploit
Patch
CWE-835
High · CVSS 7.5
EPSS 70.6% (99th pct)2022-03-15
High vulnerability · 2022-01-26
CVE-2022-23990
Patch
CWE-190
High · CVSS 7.5
EPSS 4.0% (89th pct)2022-01-26
Critical vulnerability · 2022-01-24
CVE-2022-23852
Patch
CWE-190
Critical · CVSS 9.8
EPSS 4.5% (91th pct)2022-01-24
Critical vulnerability · 2022-01-08
CVE-2022-22822
Patch
CWE-190
Critical · CVSS 9.8
EPSS 4.8% (91th pct)2022-01-08
Critical vulnerability · 2022-01-08
CVE-2022-22823
Patch
CWE-190
Critical · CVSS 9.8
EPSS 3.4% (88th pct)2022-01-08

Showing 30 of 72

Tenable nessus Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Tenable products

Frequently asked questions

References

Track Tenable nessus vulnerabilities