This vulnerability involves improper neutralization of special elements used in an SQL command (CWE-89) within Tenable Security Center. An attacker with low privileges can exploit this flaw to perform SQL injection attacks, potentially accessing sensitive data from the backend database without authorization. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact. No affected versions or patch information are explicitly provided.

An attacker with low privileges can exploit this SQL injection vulnerability to access unauthorized sensitive data from the Security Center database, potentially leading to confidentiality breaches. Integrity and availability impacts are low or none according to the CVSS vector. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Security Center application to trusted users only and monitor for unusual database activity related to SQL injection attempts.