Vulnerabilities in Rapid7
100 resultsCVE-2022-0758LOWRapid7 Nexpose Reflected XSSEPSS 0.4%CVE-2022-35629—Velociraptor Client ID SpoofingEPSS 0.4%CVE-2023-2226LOWVelociraptor crashes while parsing some malformed PE or OLE files.EPSS 0.4%CVE-2017-5242HIGHRapid7 Nexpose Virtual Appliance Duplicate SSH Host KeyEPSS 0.4%CVE-2023-0599MEDIUMRapid7 Metasploit Pro Stored XSSEPSS 0.4%CVE-2021-3844MEDIUMRapid7 InsightVM Insufficient Session ExpirationEPSS 0.4%CVE-2026-6948MEDIUMUnbounded Memory Allocation in VQLResponse Result-Set WriterEPSS 0.3%CVE-2019-5647MEDIUMRapid7 AppSpider Chrome Plugin Insufficient Session ExpirationEPSS 0.3%CVE-2023-0681MEDIUMRapid7 Nexpose Uncontrolled URL RedirectEPSS 0.3%CVE-2021-4007HIGHRapid7 Insight Agent Privilege EscalationEPSS 0.3%CVE-2024-11401MEDIUMRapid7 Insight Platform Privilege Escalation VulnerabilityEPSS 0.3%CVE-2024-6504MEDIUMRapid7 InsightVM Protection Mechanism FailureEPSS 0.3%CVE-2019-5641LOWRapid7 InsightVM Information Disclosure after LogoutEPSS 0.3%CVE-2019-5642LOWMAGICKEPSS 0.3%CVE-2022-4261MEDIUMRapid7 Nexpose Update Validation IssueEPSS 0.3%CVE-2026-9153MEDIUMArbitrary File Read in Rapid7 InsightConnect Sed PluginEPSS 0.3%CVE-2022-3913MEDIUMRapid7 Nexpose Certificate Validation IssueEPSS 0.3%CVE-2026-9154HIGHArbitrary File Write in Rapid7 InsightConnect Sed PluginEPSS 0.3%CVE-2020-7382MEDIUMUnquoted Path in Rapid7 Nexpose InstallerEPSS 0.3%CVE-2020-7358MEDIUMCode Injection in Rapid7 AppSpider Pro InstallerEPSS 0.3%