Skip to content
Sign in
5.7 Medium

CVE-2023-24493 A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before…

Description

A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a host.

Affected products and versions

Product Affected versions Fixed in
Tenable.Sc Versions not published

Other CVEs of Tenable.Sc

The 8 CVEs of Tenable.Sc →
CVE-2023-0476 A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning… 6.5 Medium CVE-2023-24494 A stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation of user-supplied input… 5.4 Medium CVE-2023-24495 A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session &… 6.5 Medium CVE-2022-0130 Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could… Not rated
Track this CVE