CVE-2017-11508

8.8 highEPSS 1.2%

High (8.8) in tenable security center. EPSS 1.2% chance of exploitation in the next 30 days.

SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with sufficient privileges to run diagnostic scans. An attacker could exploit this vulnerability by entering a crafted SQL query into the password field of a diagnostic scan within SecurityCenter. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-11-02
Modified: 2026-08-17
Record from: the NVD, synced 2026-10-19

Affected

tenable:security_center

References

http://www.securitytracker.com/id/1039804
https://www.tenable.com/security/tns-2017-13
http://www.securitytracker.com/id/1039804
https://www.tenable.com/security/tns-2017-13

Check your stack JSON