Rapid7 Nexpose vulnerabilities

• rapid7 insight agent, insightvm, nexpose +2 more Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation CVE-2026-14172 7.8 HighJuly 24, 2026
• rapid7 insightvm/nexpose Rapid7 Nexpose Insecure Java Keystore Password Generation CVE-2026-1814 Public exploit 6.8 MediumFebruary 3, 2026
• rapid7 nexpose Rapid7 Nexpose Forced Browsing CVE-2023-1699 4.3 MediumMarch 30, 2023
• rapid7 insightvm, nexpose +1 more Rapid7 Nexpose Uncontrolled URL Redirect CVE-2023-0681 4.3 MediumMarch 20, 2023
• rapid7 insightvm, nexpose +1 more Rapid7 Nexpose Certificate Validation Issue CVE-2022-3913 5.3 MediumFebruary 1, 2023
• rapid7 insightvm, insightvm virtual appliance, nexpose virtual appliance +2 more Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key CVE-2017-5242 7.7 HighJanuary 12, 2023
• rapid7 insightvm, nexpose +1 more Rapid7 Nexpose Update Validation Issue CVE-2022-4261 4.4 MediumDecember 7, 2022
• rapid7 nexpose Rapid7 Nexpose Reflected XSS CVE-2022-0758 3.3 LowMarch 17, 2022
• rapid7 nexpose Rapid7 Nexpose SQL Injection CVE-2022-0757 5.5 MediumMarch 17, 2022
• rapid7 nexpose Rapid7 Nexpose Information Disclosure after logout CVE-2019-5640 3.3 LowNovember 22, 2021
• rapid7 nexpose Rapid7 Nexpose Security Console Ticket Access Authentication Vulnerability CVE-2021-31868 4.3 MediumAugust 19, 2021
• rapid7 nexpose Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the... CVE-2021-3535 4.3 MediumJune 16, 2021
• rapid7 nexpose SQL Injection in Rapid7 Nexpose CVE-2020-7383 6.5 MediumOctober 14, 2020
• rapid7 nexpose Unquoted Path in Rapid7 Nexpose Installer CVE-2020-7382 6.8 MediumSeptember 3, 2020
• rapid7 nexpose Code Injection in Rapid7 Nexpose Installer CVE-2020-7381 5.8 MediumSeptember 3, 2020
• rapid7 nexpose Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote... CVE-2012-6494 6.1 MediumJanuary 25, 2020
• rapid7 nexpose Rapid7 Nexpose Insufficient Session Management CVE-2019-5638 8.7 HighAugust 21, 2019
• rapid7 nexpose, nexpose/insightvm security console +1 more Rapid7 Nexpose/InsightVM Security Console CSRF CVE-2019-5630 Public exploit 5.9 MediumJuly 3, 2019
• rapid7 nexpose Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests... CVE-2017-5264 Public exploit 8.8 HighDecember 14, 2017
• rapid7 nexpose, nexpose hardware appliance +1 more The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does... CVE-2017-5243 8.5 HighJune 6, 2017
• rapid7 nexpose All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading... CVE-2017-5232 7.8 HighMarch 2, 2017
• rapid7 nexpose The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted... CVE-2017-5230 7.2 HighMarch 2, 2017
• rapid7 nexpose In the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated... CVE-2016-9757 5.4 MediumDecember 20, 2016
• rapid7 nexpose Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4... CVE-2012-6493 Public exploit 6.8 MediumFebruary 4, 2014