Skip to content
OpenAdvisories

Product · Rapid7

Nexpose

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.3
    CVE-2022-0758

    Rapid7 Nexpose Reflected XSS

    Rapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the shared scan configuration component of the tool. With this vulnerability an attacker could pass literal values as the test credentials, providin…

    Rapid7 Nexpose
  • Low 3.3
    CVE-2019-5640

    Rapid7 Nexpose Information Disclosure after logout

    Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the inspect element browser feature to remove the login panel and view the details available i…

    Rapid7 Nexpose