CVE-2023-0476: Tenable Tenable.sc

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could generate data in Active Directory using the application account through blind LDAP injection.

Affected products

• Tenable Tenable.sc: up to and including 5.23.1

Published 2023-01-26. Last modified 2026-06-17.