CVE-2020-5737: Tenable Tenable.sc

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation techniques have been implemented to correct this issue.

Affected products

• Tenable Tenable.sc: version 5.14.0 only; version 5.14.1 only

Published 2020-04-17. Last modified 2026-06-17.