Skip to content
OpenAdvisories

Product · Tenable

Security Center

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-19639

    Improper Access Control

    An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.

    Tenable Security Center
  • Medium 5.3
    CVE-2026-19636

    Insuffucient Protections Lead to Brute Force

    An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.

    Tenable Security Center
  • Medium 4.9
    CVE-2026-19631

    SQL Injection

    A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.

    Tenable Security Center
  • Medium 6.5
    CVE-2026-2698

    Improper Access Control

    An improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

    Tenable Security Center
  • Medium 6.3
    CVE-2026-2697

    Indirect Object Reference (IDOR) in Security Center

    An Indirect Object Reference (IDOR) in Security Center allows an authenticated remote attacker to escalate privileges via the 'owner' parameter.

    Tenable Security Center
  • Medium 4.3
    CVE-2025-36636

    Improper Access Control

    In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

    Tenable Security Center
  • Medium 5.4
    CVE-2024-5759

    Improper privilege management

    An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges

    Tenable Security Center
  • Medium 5.9
    CVE-2024-1471

    HTML Injection Vulnerability

    An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks.

    Tenable Security Center
  • Medium 6.3
    CVE-2023-2005

    Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability

    Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnera…

    Tenable Security Center Nessus Tenable.io