# Tenable vulnerabilities > Tenable has 151 published vulnerabilities across 15 products in our catalogue. 3 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Nessus, with 65. If you run Tenable software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/tenable ## At a glance - **Published vulnerabilities:** 151 - **Known to be exploited:** 3 - **Products:** 15 - **Versions:** 327 - **Most recently added to the known-exploited list:** [CVE-2020-11023](https://www.precursorintelligence.com/what-is/cve-2020-11023), 23 January 2025. We keep watching the list. ## Which Tenable products have the most vulnerabilities? - [Nessus](https://www.precursorintelligence.com/product/tenable/nessus): 65 published vulnerabilities, 153 versions - [Tenable.sc](https://www.precursorintelligence.com/product/tenable/tenable.sc): 46 published vulnerabilities, 12 versions - [Nessus Network Monitor](https://www.precursorintelligence.com/product/tenable/nessus_network_monitor): 14 published vulnerabilities, 20 versions - [Securitycenter](https://www.precursorintelligence.com/product/tenable/securitycenter): 10 published vulnerabilities, 7 versions - [Log Correlation Engine](https://www.precursorintelligence.com/product/tenable/log_correlation_engine): 9 published vulnerabilities, 5 versions - [Nessus Agent](https://www.precursorintelligence.com/product/tenable/nessus_agent): 9 published vulnerabilities, 86 versions - [Appliance](https://www.precursorintelligence.com/product/tenable/appliance): 4 published vulnerabilities, 36 versions - [Security Center](https://www.precursorintelligence.com/product/tenable/security_center): 4 published vulnerabilities, 1 version - [Tenable.io](https://www.precursorintelligence.com/product/tenable/tenable.io): 2 published vulnerabilities, 0 versions - [Identity Exposure](https://www.precursorintelligence.com/product/tenable/identity_exposure): 2 published vulnerabilities, 0 versions Each product page lists its own known-exploited flaws. ## Which Tenable vulnerabilities are being exploited? 3 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2020-11023](https://www.precursorintelligence.com/what-is/cve-2020-11023): JQuery Cross-Site Scripting (XSS) Vulnerability. Medium, CVSS 6.9, chance of use in 30 days 85%, known exploited since 23 January 2025. - [CVE-2019-11043](https://www.precursorintelligence.com/what-is/cve-2019-11043): PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability. High, CVSS 8.7, chance of use in 30 days >99%, known exploited since 25 March 2022. - [CVE-2021-40438](https://www.precursorintelligence.com/what-is/cve-2021-40438): Apache HTTP Server-Side Request Forgery (SSRF). Critical, CVSS 9.0, chance of use in 30 days >99%, known exploited since 1 December 2021. ## Which Tenable flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2021-40438](https://www.precursorintelligence.com/what-is/cve-2021-40438): >99%, Critical (CVSS 9.0), known exploited - [CVE-2019-11043](https://www.precursorintelligence.com/what-is/cve-2019-11043): >99%, High (CVSS 8.7), known exploited - [CVE-2020-11022](https://www.precursorintelligence.com/what-is/cve-2020-11022): >99%, Medium (CVSS 6.1) - [CVE-2021-44790](https://www.precursorintelligence.com/what-is/cve-2021-44790): 97%, Critical (CVSS 9.8) - [CVE-2021-3711](https://www.precursorintelligence.com/what-is/cve-2021-3711): 88%, Critical (CVSS 9.8) - [CVE-2020-11023](https://www.precursorintelligence.com/what-is/cve-2020-11023): 85%, Medium (CVSS 6.9), known exploited - [CVE-2021-44224](https://www.precursorintelligence.com/what-is/cve-2021-44224): 82%, High (CVSS 8.2) - [CVE-2022-0778](https://www.precursorintelligence.com/what-is/cve-2022-0778): 73%, High (CVSS 7.5) - [CVE-2021-34798](https://www.precursorintelligence.com/what-is/cve-2021-34798): 65%, High (CVSS 7.5) - [CVE-2021-3449](https://www.precursorintelligence.com/what-is/cve-2021-3449): 64%, Medium (CVSS 5.9) ## All Tenable products we track 12 products with at least one tracked version, most vulnerabilities first: - [Nessus](https://www.precursorintelligence.com/product/tenable/nessus): 65 vulnerabilities, 153 versions - [Tenable.sc](https://www.precursorintelligence.com/product/tenable/tenable.sc): 46 vulnerabilities, 12 versions - [Nessus Network Monitor](https://www.precursorintelligence.com/product/tenable/nessus_network_monitor): 14 vulnerabilities, 20 versions - [Securitycenter](https://www.precursorintelligence.com/product/tenable/securitycenter): 10 vulnerabilities, 7 versions - [Log Correlation Engine](https://www.precursorintelligence.com/product/tenable/log_correlation_engine): 9 vulnerabilities, 5 versions - [Nessus Agent](https://www.precursorintelligence.com/product/tenable/nessus_agent): 9 vulnerabilities, 86 versions - [Appliance](https://www.precursorintelligence.com/product/tenable/appliance): 4 vulnerabilities, 36 versions - [Security Center](https://www.precursorintelligence.com/product/tenable/security_center): 4 vulnerabilities, 1 version - [Web UI](https://www.precursorintelligence.com/product/tenable/web_ui): 2 vulnerabilities, 3 versions - [Nessus Amazon Machine Image](https://www.precursorintelligence.com/product/tenable/nessus_amazon_machine_image): 1 vulnerability, 1 version - [Plugin-Set](https://www.precursorintelligence.com/product/tenable/plugin-set): 1 vulnerability, 2 versions - [Plugin Feed](https://www.precursorintelligence.com/product/tenable/plugin_feed): 1 vulnerability, 1 version ## Questions ### How many vulnerabilities does Tenable have? Our catalogue lists 151 published vulnerabilities across 15 products and 327 versions from Tenable. The most recent Tenable flaw added to the known-exploited list is CVE-2020-11023, on 23 January 2025. ### Which Tenable vulnerabilities are being exploited? 3 Tenable vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2020-11023, CVE-2019-11043 and CVE-2021-40438. The full list is on this page. ### Which Tenable product has the most vulnerabilities? Nessus, with 65 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Tenable vulnerabilities? Create a Precursor Intelligence account and track the Tenable products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Tenable? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact