Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-106126

Command Injection

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.

CVSS 4.0 · 9.4 Critical EPSS 2.2% KEV · Not listed
Vendors
Tenable
Products
Identity Exposure
CVE-2026-13007

Insecure Public Caching on REST API Endpoints in Tenable Identity Exposure

Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated remote attackers. Affected responses are served with Cache-Control: public headers and without Vary: Cookie, allowing reverse proxies and CDNs to cache and serve sensitive data to unauthenticated users even after authentication is applied.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Tenable
Products
Identity Exposure
CVE-2024-3232

Formula Injection Vulnerability

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator into executing CSV payloads. - CVE-2024-3232

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Tenable
Products
Identity Exposure
CVE-2024-1683

DLL Injection in Tenable Identity Exposure Secure Relay

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Tenable
Products
Identity Exposure