Nessus Network Monitor
Approved changes feed: RSS · Atom
cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tenable (c0ec4e71-d667-5327-b3ed-b4c21aa5a87e) |
|---|---|
| Product | Nessus Network Monitor (a95f0472-4f53-543e-ae2b-8717e3e751f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-24917 |
vulnerable | 2026-06-08 07:12:50.168849 |
Improper Access Control leads to Local Privilege Escalation
HIGH (7.8)
In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.
Published: 2025-05-23T15:59:20.064Z
Updated: 2026-02-26T18:27:56.754Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24916 |
vulnerable | 2026-06-08 07:12:50.168305 |
Improper Access Control leads to Local Priviledge Escalation
HIGH (7)
When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.
Published: 2025-05-23T15:46:02.459Z
Updated: 2026-02-26T18:27:57.342Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9158 |
vulnerable | 2026-06-08 07:00:26.814560 |
XSS
HIGH (8.4)
A stored cross site scripting vulnerability exists in Nessus Network Monitor where an authenticated, privileged local attacker could inject arbitrary code into the NNM UI via the local CLI.
Published: 2024-09-30T16:24:55.635Z
Updated: 2024-09-30T17:22:16.903Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5624 |
vulnerable | 2026-06-08 06:19:44.183239 |
Blind SQL Injection
HIGH (7.2)
Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow an admin user to alter parameters that could potentially allow a blindSQL injection.
Published: 2023-10-26T16:36:32.251Z
Updated: 2024-09-09T15:48:24.575Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5623 |
vulnerable | 2026-06-08 06:19:44.182704 |
Privilege Escalation
HIGH (7)
NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location
Published: 2023-10-26T16:25:17.792Z
Updated: 2024-09-09T15:50:01.791Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5622 |
vulnerable | 2026-06-08 06:19:44.182158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3712 |
vulnerable | 2026-06-08 05:33:53.765457 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3711 |
vulnerable | 2026-06-08 05:33:53.616409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1971 |
vulnerable | 2026-06-08 05:21:03.860113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.