CVE-2023-24495: Tenable Tenable.sc

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper validation of session & user-accessible input data. A privileged, authenticated remote attacker could interact with external and internal services covertly.

Affected products

• Tenable Tenable.sc: up to and including 5.23.1

Published 2023-01-26. Last modified 2026-06-17.