CVE-2022-0130: Tenable Tenable.sc

High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow a remote, unauthenticated attacker to execute code under special circumstances. An attacker would first have to stage a specific file type in the web server root of the Tenable.sc host prior to remote exploitation.

Affected products

• Tenable Tenable.sc: from 5.14.0, up to and including 5.19.1

Published 2022-01-14. Last modified 2026-06-17.