CVE-2023-24493: Tenable Tenable.sc

Medium severity, CVSS 5.7. EPSS: 0.7% chance of exploitation in the next 30 days.

A formula injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could leverage the reporting system to export reports containing formulas, which would then require a victim to approve and execute on a host.

Affected products

• Tenable Tenable.sc: up to and including 5.23.1

Published 2023-01-26. Last modified 2026-06-17.