Skip to content
OpenAdvisories

Vendor

Rapid7

135 known vulnerabilities.

Products

Velociraptor 42 Nexpose 17 Insight Agent 12 Metasploit Framework 12 InsightVM 8 Appspider Pro 6 Metasploit Pro 6 Metasploit 4 InsightCloudSec 3 InsightConnect Sed Plugin 3 AppSpider 2 Insight Platform 2 Rapid7 Nexpose 1 Platform 1 InsightAppSec 1 InsightConnect Ping Plugin 1 Vulnerability Management 1 InsightConnect Finger Plugin 1 InsightConnect Markdown Plugin 1 InsightConnect Traceroute Plugin 1 Minerva 1 InsightConnect AWK Plugin 1 Insight Collector 1 Nexpose hardware appliance 1 Nexpose/InsightVM Security Console 1 Nexpose Virtual Appliance 1 InsightVM Virtual Appliance 1 Metasploit (Pro, Express, and Community editions) 1 InsightConnect SQLmap Plugin 1 Komand 1 InsightConnect RPM Plugin 1 InsightConnect Compression Plugin 1 InsightConnect Tcpdump Plugin 1 InsightConnect TR Plugin 1 InsightVM/Nexpose 1
All Critical High Medium Low Exploited only Public exploit

135 results · Feed

  • Low 3.4
    CVE-2018-5559

    In Rapid7 Komand version 0.41.0 and prior, certain endpoints that are able to list the always encrypted-at-rest connect…

    Rapid7 Komand
  • Unscored —
    CVE-2017-5264 Public exploit

    Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated …

    Rapid7 Nexpose
  • Unscored —
    CVE-2017-5244

    Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests. Only POST requ…

    Rapid7 Metasploit (Pro, Express, and Community editions)
  • Unscored —
    CVE-2017-5243

    The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired a…

    Rapid7 Nexpose hardware appliance
  • Unscored —
    CVE-2017-5240

    Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe c…

    Rapid7 Appspider Pro
  • Unscored —
    CVE-2017-5236

    Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein i…

    Rapid7 Appspider Pro
  • Unscored —
    CVE-2017-5230

    The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of…

    Rapid7 Nexpose
  • Unscored —
    CVE-2017-5233

    Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possibl…

    Rapid7 Appspider Pro
  • Unscored —
    CVE-2017-5232

    All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is…

    Rapid7 Nexpose
  • Unscored —
    CVE-2017-5228

    All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the…

    Rapid7 Metasploit
  • Unscored —
    CVE-2017-5235

    Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it …

    Rapid7 Metasploit Pro
  • Unscored —
    CVE-2017-5229

    All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the…

    Rapid7 Metasploit
  • Unscored —
    CVE-2017-5231

    All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the…

    Rapid7 Metasploit
  • Unscored —
    CVE-2017-5234

    Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possi…

    Rapid7 Insight Collector
  • Unscored —
    CVE-2016-9757

    In the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated user who has the capabil…

    Rapid7 Nexpose