This vulnerability involves improper neutralization of special elements used in an SQL command (CWE-89) within Tenable Security Center. An authenticated administrator can exploit this flaw to execute arbitrary SQL queries, potentially accessing sensitive information such as credentials. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently available.

An attacker with authenticated administrator privileges could exploit this SQL injection vulnerability to access sensitive data stored in the Security Center database, including credentials. This could compromise confidentiality but does not affect integrity or availability according to the CVSS vector. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit administrator access to trusted personnel and monitor for suspicious activity related to SQL queries within the Security Center environment.