Vulnerabilities > Tenable > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-11-03 CVE-2021-20135 Unspecified vulnerability in Tenable Nessus
Nessus versions 8.15.2 and earlier were found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host.
local
low complexity
tenable
6.7
2021-10-26 CVE-2021-41182 Cross-site Scripting vulnerability in multiple products
jQuery-UI is the official jQuery user interface library.
6.1
2021-10-26 CVE-2021-41183 Cross-site Scripting vulnerability in multiple products
jQuery-UI is the official jQuery user interface library.
6.1
2021-10-26 CVE-2021-41184 Cross-site Scripting vulnerability in multiple products
jQuery-UI is the official jQuery user interface library.
6.1
2021-09-09 CVE-2021-20117 Unspecified vulnerability in Tenable Nessus Agent
Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host.
local
low complexity
tenable
6.7
2021-09-09 CVE-2021-20118 Unspecified vulnerability in Tenable Nessus Agent
Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host.
local
low complexity
tenable
6.7
2021-07-21 CVE-2021-20106 Unspecified vulnerability in Tenable Nessus
Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.
local
low complexity
tenable
6.5
2021-06-29 CVE-2021-20079 Unspecified vulnerability in Tenable Nessus
Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.
local
low complexity
tenable
6.7
2021-06-28 CVE-2021-20099 Unspecified vulnerability in Tenable Nessus
Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host.
local
low complexity
tenable
6.7
2021-06-28 CVE-2021-20100 Unspecified vulnerability in Tenable Nessus
Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host.
local
low complexity
tenable
6.7