Adds or removes tags from the specified assets, and returns the UUID of the asynchronous asset update job.

Western Region

Test User

Deletes and unlinks a scanner from Tenable Vulnerability Management.

Downloads exported vulnerabilities as a JSON file.

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. (CVE-2022-21837, CVE-2022-21840, CVE-2022-21842)

Security Updates for Microsoft SharePoint Server 2016 (January 2022)

The remote web server in some responses sets a permissive Content-Security-Policy (CSP) frame-ancestors response header or does not set one at all.

The CSP frame-ancestors header has been proposed by the W3C Web Application Security Working Group as a way to mitigate cross-site scripting and clickjacking attacks.

Missing or Permissive Content-Security-Policy frame-ancestors HTTP Response Header

Exports all assets that match the request criteria.

Exports vulnerabilities that match the request criteria.

Returns the specified agent details for the specified scanner.

CodyAgents

Agent Group A

GRD-LPTP

my.new-hostname.server

name

NESSUS_SCAN

Retrieves the details for a vulnerability recorded on a specified asset.

The remote Windows host contains a version of the Microsoft Foundation Class (MFC) library affected by an insecure library loading vulnerability. The path used for loading external libraries is not securely restricted.

An attacker can exploit this by tricking a user into opening an MFC application in a directory that contains a malicious DLL, resulting in arbitrary code execution.

MS11-025: Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote Code Execution (2500212)

iavb

msft

osvdb

secunia

The remote web server is affected by a command injection vulnerability in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of environment variables. This allows a remote attacker to execute arbitrary code via environment variable manipulation depending on the configuration of the system.

GNU Bash Environment Variable Handling Code Injection (Shellshock)

cert

edb-id

iava

Returns details for the specified scanner.

US West Cloud Scanners

Imports a list of vulnerabilities in JSON format.

slibs

Returns a list of agents for the specified scanner.

example.com

Returns a list of agents for the specified agent group.

Codys-MacBook-Pro.local

DC02

DESKTOP-PSNDJQ6

Returns a list of assigned tags for the specified asset UUID.

Retrieves a list of the vulnerabilities recorded for a specified asset.

Returns a list of assets with vulnerabilities.

US Cloud Scanner

Returns a list of recorded vulnerabilities.

Moves assets from the specified network to another network.

Removes an agent from the specified agent group.

AGENTWINDOWS44

This controls the Nessus Agent backend logging level.  Backend reload required.

Nessus Agent Log Level

Controls the performance for plugin compilation; lower performance takes longer to compile, but uses fewer system processor resources.  Service restart required.  Requires 8.1.0+

Plugin Compilation Performance

Controls the scan performance; lower performance takes longer to scan, but uses fewer system processor resources.  Service restart required.  Requires 8.1.0+

Scan Performance

The update plan to which Nessus Agent will track.  Requires 7.7.0+

Nessus Agent Update Plan

If the Nessus Agent's hostname is changed, the new hostname is updated in the Nessus Agent's manager.

Automatic Hostname Update

Specifies the number of days of the Agent being offline after which Rule-Based Scans will stop executing

Offline Agent Scan Trigger Execution Threshold

The maximum number of scans to run on this Agent per day.

Maximum Scans Per Day

NewName

To generate [API keys](https://docs.tenable.com/vulnerability-management/Content/Settings/my-account/GenerateAPIKey.htm#To-generate-API-keys-for-your-own-account:) in Tenable Vulnerability Management:

1. Login to your [Tenable](https://cloud.tenable.com/tio/app.html#/login) account and navigate to **My Account** by selecting the user icon in the top right menu.
2. Navigate to API Keys and select generate to generate an Access Key and a Secret Key.
3. Enter these values into the connection configuration of your integration.
   1. Save these values as they will not be shown again.


Use the component to assess vulnerabilities; manage assets, users, agents, and more.

**Tenable Vulnerability Management** is a leading security solution that identifies, evaluates, and prioritizes vulnerabilities to reduce risk and enhance cybersecurity.

Use the component to assess vulnerabilities; manage assets, users, agents, and more.

API Documentation:

The component was built using the [Tenable Vulnerability Management API Reference](https://developer.tenable.com/reference/navigate).


Action Name	Action Description
Add or Remove Asset Tags	Adds or removes tags from the specified assets, and returns the UUID of the asynchronous asset update job.
Delete Asset	Deletes the specified asset.
Export Assets	Exports all assets that match the request criteria.
Get Asset	Returns details of the specified asset.
Import Assets	Imports asset data in JSON format.
List Assets	Lists up to 5,000 assets.
List Asset Tags	Returns a list of assigned tags for the specified asset UUID.
Move Assets	Moves assets from the specified network to another network.
Create User	Creates a new user.
Delete User	Deletes a user.
Get User	Returns details for a specific user.
List Users	Returns a list of users.
Update User	Updates an existing user account.
Export Vulnerabilities	Exports vulnerabilities that match the request criteria.
Import Vulnerabilities	Imports a list of vulnerabilities in JSON format.
List Assets with Vulnerabilities	Returns a list of assets with vulnerabilities.
List Asset Vulnerabilities	Retrieves a list of the vulnerabilities recorded for a specified asset.
List Vulnerabilities	Returns a list of recorded vulnerabilities.
Add Agent to Group	Adds an agent to the agent group.
Create Agent Group	Creates an agent group.
Delete Agent Group	Deletes an agent group.
Get Agent	Returns the specified agent details for the specified scanner.
Get Agent Group	Gets details for the agent group.
List Agent Groups	Retrieves a list of agent groups.
List Agents	Returns a list of agents for the specified scanner.
List Agents By Group	Returns a list of agents for the specified agent group.
Remove Agent from Group	Removes an agent from the specified agent group.
Rename Agent	Renames an agent.
Unlink Agent	Unlinks an agent.
Update Agent Group	Changes the name of the agent group.
Delete Scanner	Deletes and unlinks a scanner from Tenable Vulnerability Management.
Get Scanner	Returns details for the specified scanner.
List Scanners	Returns the scanner list.
Update Scanner	Updates the specified scanner.
Download Vulnerabilities	Downloads exported vulnerabilities as a JSON file.
Get Asset Vulnerability Details	Retrieves the details for a vulnerability recorded on a specified asset.
Get Plugin Details	Retrieves the details for a plugin.
Raw Request	Send raw HTTP request to Tenable.

Tenable Vulnerability Management Connector

Integrate with customers’ other SaaS apps, fast

About the Tenable Vulnerability Management Connector

Actions

Triggers

Ready to get started?