CVE-2025-36636CWE-284broken-access-control
CVE-2025-36636
Medium · published October 8, 2025
What it is
In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.
The record
Technical detail
- CVSS v3.1
- 4.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00194 · 8.6th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2025-10-08T20:15Z
References (1)
EPSS history
Timeline
08 OCT 15:19Z
Improper Access Control
cvelistv5