Skip to content
OpenAdvisories

Product · Rapid7

Metasploit Pro

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-0599

    Rapid7 Metasploit Pro Stored XSS

    Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization.  Using this vulnerability, an authenticated attacker can execute arbitrary HTML and script code i…

    Rapid7 Metasploit Pro
  • Medium 6.1
    CVE-2020-7355

    Rapid7 Metasploit Pro Stored XSS in 'notes' field

    Cross-site Scripting (XSS) vulnerability in the 'notes' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a scan target store an XSS sequence in the Metasploit Pro console, which will trig…

    Rapid7 Metasploit Pro
  • Medium 6.1
    CVE-2020-7354

    Rapid7 Metasploit Pro Stored XSS in 'host' field

    Cross-site Scripting (XSS) vulnerability in the 'host' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a scan target to store an XSS sequence in the Metasploit Pro console, which will tr…

    Rapid7 Metasploit Pro