Nessus Network Monitor

Vendor:

First CVE: Nov 6, 2020 · Active for 5 years

14

Total CVEs

More Total CVEs than 92% of tracked products

2.8

Avg CVEs / Year

Higher CVE frequency than 78% of tracked products

7.3

Avg CVSS

Higher Avg CVSS than 48% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Nessus Network Monitor over time

Volume of CVEsAvg CVSS Base Score

First CVE

Nov 6, 2020

5 years ago

Most Recent CVE

May 23, 2025

430 days ago

CVE Severity & Scoring

Nessus Network Monitor14 CVEs

29%

64%

All CVEs352,785 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local5 (35.7%)

Network9 (64.3%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low9 (64.3%)

High5 (35.7%)

Unknown0 (0.0%)

User Interaction

None13 (92.9%)

Unknown0 (0.0%)

Required1 (7.1%)

Privileges Required

Low6 (42.9%)

High1 (7.1%)

None7 (50.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (14 CVEs).

14 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2021-3711CRITICAL In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application will call this function twice. The first tim	Aug 24, 2021	9.8	79	NO	NO
CVE-2021-3449MEDIUM An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms	Mar 25, 2021	5.9	57	NO	NO
CVE-2021-3712HIGH ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This cont	Aug 24, 2021	7.4	53	NO	NO
CVE-2021-23840HIGH Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable	Feb 16, 2021	7.5	53	NO	NO
CVE-2021-3450HIGH The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.	Mar 25, 2021	7.4	34	NO	NO
CVE-2025-24917HIGH In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with	May 23, 2025	7.8	24	NO	NO
CVE-2025-24916HIGH When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-dire	May 23, 2025	7.8	24	NO	NO
CVE-2023-5622HIGH Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORITY\SYSTEM on Windows hosts by replacing a specially crafted	Oct 26, 2023	8.8	24	NO	NO
CVE-2021-23841MEDIUM The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate	Feb 16, 2021	5.9	24	NO	NO
CVE-2023-5623HIGH NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non	Oct 26, 2023	7.8	23	NO	NO

View all 14 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (14 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (14 CVEs).

Media Mentions

Signals from CVEs in this product scope (14 CVEs).

Top CNAs Publishing CVEs For Nessus Network Monitor

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
5.13.0	4	6.7	34.9%
5.12.1	4	6.7	34.9%
5.12.0	5	6.9	28.0%
5.11.1	5	6.9	28.0%
5.11.0	5	6.9	28.0%