← CVE Intelligence

CVE-2025-36625

Log Poisoning in Nessus PUBLISHED

Description (CNA)

In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application.

Affected (CNA)

Vendor / productVersions
Tenable / Nessusaffected 0 before 10.8.4

CWE

CWE-117

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.