CVE-2021-20100

MEDIUM 6.7CVE-2021-20100 · Published 28/06/2021 · updated 17/06/2026

In short

CVE-2021-20100 is a MEDIUM (CVSS 6.7) vulnerability affecting nessus (tenable).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.9% of all vulnerabilities.
Fix: update to 8.2.5 or later.

Package	Affected versions	Patched versions
nessus tenable	`< 8.2.5`	`8.2.5`

Description

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20099.

References

tenable.com/security/tns-2021-12 · Vendor Advisory

More vulnerabilities in nessus

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nessus

tenable

< 8.2.5

8.2.5

More vulnerabilities in nessus

See all →