VYPR
Unrated severityNVD Advisory· Published Jul 23, 2014· Updated Jun 17, 2026

CVE-2014-4980

CVE-2014-4980

Description

The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Tenable/Nessus5 versions
    cpe:2.3:a:tenable:nessus:5.2.3:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:tenable:nessus:5.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:tenable:nessus:5.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:tenable:nessus:5.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:tenable:nessus:5.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:tenable:nessus:5.2.7:*:*:*:*:*:*:*
  • Tenable/Web UI2 versions
    cpe:2.3:a:tenable:web_ui:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:tenable:web_ui:*:*:*:*:*:*:*:*range: <=2.3.4
    • (no CPE)range: <2.3.5

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.