CVE-2024-12174

2.7 lowEPSS 0.2%

Low (2.7). EPSS 0.2% chance of exploitation in the next 30 days.

An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server.

Severity

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2024-12-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.tenable.com/security/tns-2024-19

Check your stack JSON