Identity Exposure vulnerabilities

2 known vulnerabilities in Identity Exposure from Tenable. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Tenable Identity Exposure: Missing Authentication for Critical Functionality

  CVE-2026-13007Jun 23, 2026Tenable

  Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated rem

• 7.3 High severity

  Tenable Identity Exposure Secure Relay: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-1683Feb 23, 2024Tenable

  A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.