Vulnetix
Try Vulnetix Request Demo
CVE-2024-3232 PUBLISHED CVSS 7.599999904632568 HIGH

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator into executing CSV payloads. - CVE-2024-3232

EPSS 1.94% · 83.3th percentile

Risk Scores

CVSS v3.1
7.599999904632568
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
EPSS Score
1.94%
83.3th percentile

Affected Products

VendorProductVersions
tenableidentity_exposure3.29, 3.42, 3.19
tenableidentity_exposure0
TenableTenable Identity ExposureTenable Identity Exposure 3.42, Tenable Identity Exposure 3.29, Tenable Identity Exposure 3.19

Timeline

References

Open in Interactive Console →