CVE-2024-1891: Tenable Security Center

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A stored cross site scripting vulnerability exists in Tenable Security Center where an authenticated, remote attacker could inject HTML code into a web application scan result page.

Affected products

• Tenable Security Center: before 6.4.0 (fixed in 6.4.0)

Published 2024-06-12. Last modified 2026-06-17.