CVE-2024-3232

MEDIUM 6.8CVE-2024-3232 · Published 16/07/2024 · updated 17/06/2026

In short

CVE-2024-3232 is a MEDIUM (CVSS 6.8) vulnerability affecting identity exposure (tenable).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 40.6% of all vulnerabilities.
Fix: update to 3.59.4 or later.

Package	Affected versions	Patched versions
identity exposure tenable	`< 3.59.4`	`3.59.4`

Description

A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with administrative privileges could manipulate application form fields in order to trick another administrator into executing CSV payloads. - CVE-2024-3232

References

tenable.com/security/tns-2024-04 · Vendor Advisory

More vulnerabilities in identity exposure

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free