Rapid7 vulnerabilities
135 CVEs and advisories name Rapid7 as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-35629Velociraptor Client ID Spoofing
- CVE-2022-0758Rapid7 Nexpose Reflected XSS
- CVE-2022-0757Rapid7 Nexpose SQL Injection
- CVE-2022-0237Rapid7 Insight Agent Privilege Escalation
- CVE-2021-4016Rapid7 Insight Agent Improper Access Control
- CVE-2021-4007Rapid7 Insight Agent Privilege Escalation
- CVE-2019-5640Rapid7 Nexpose Information Disclosure after logout
- CVE-2021-31868Rapid7 Nexpose Security Console Ticket Access Authentication Vulnerability
- CVE-2021-3619Rapid7 Velociraptor Notebooks Authenticated Persistent XSS
- CVE-2021-3535Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the Security Console's Filtered Asset Search f
- CVE-2020-7385Metasploit Framework 'drb_remote_codeexec' code execution
- CVE-2020-7384Client-Side Command Injection in Rapid7 Metasploit
- CVE-2020-7383SQL Injection in Rapid7 Nexpose
- CVE-2020-7358Code Injection in Rapid7 AppSpider Pro Installer
- CVE-2020-7382Unquoted Path in Rapid7 Nexpose Installer
- CVE-2020-7381Code Injection in Rapid7 Nexpose Installer
- CVE-2019-5645Rapid7 Metasploit HTTP Handler Denial of Service
- CVE-2020-7377Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module
- CVE-2020-7376Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module
- CVE-2020-7355Rapid7 Metasploit Pro Stored XSS in 'notes' field
- CVE-2020-7354Rapid7 Metasploit Pro Stored XSS in 'host' field
- CVE-2020-7350Metasploit Framework Plugin Libnotify Command Injection
- CVE-2019-5647Rapid7 AppSpider Chrome Plugin Insufficient Session Expiration
- CVE-2019-5642MAGICK
- CVE-2019-5638Rapid7 Nexpose Insufficient Session Management
- CVE-2019-5631Rapid7 InsightAppSec Local Privilege Escalation
- CVE-2019-5629Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local privilege escalation due to an uncontrolled DLL search path.
- CVE-2019-5630Rapid7 Nexpose/InsightVM Security Console CSRF
- CVE-2019-5624Rapid7 Metasploit Framework Zip Import Directory Traversal
- CVE-2019-5615Rapid7 InsightVM Stored Credential Exposure