CVE-2024-3232

HIGH

Tenable Identity Exposure - Code Injection

Title source: llm

Description

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator into executing CSV payloads. - CVE-2024-3232

References (1)

[Vendor Advisory] https://www.tenable.com/security/tns-2024-04

Scores

CVSS v3 7.6

EPSS 0.0194

EPSS Percentile 83.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Classification

CWE

CWE-1236

Status published

Affected Products (1)

tenable/identity_exposure < 3.59.4

Timeline

Published Jul 16, 2024

Tracked Since Feb 18, 2026