Skip to contentRapid7 vulnerabilities
Newest
- rapid7 velociraptorHTTP Filestore Endpoints Misapply Permissions Across OrganizationsCVE-2026-6863Fix available6.8 Medium
- rapid7 velociraptorVelociraptor EVTX Parser — Process Crash via Crafted .evtx FileCVE-2026-7572Fix available4.4 Medium
- rapid7 velociraptorGetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizationsCVE-2026-7573Fix available5.0 Medium
- rapid7 velociraptorUnbounded Memory Allocation in VQLResponse Result-Set WriterCVE-2026-69484.9 Medium
- rapid7 insight agentLocal Privilege Escalation via OpenSSL configuration file in Insight AgentCVE-2026-64828.5 High
- rapid7 velociraptorVelociraptor Query() Plugin Misapplies Permissions To OrgsCVE-2026-62908.0 High
- rapid7 insight agentInsight Agent Private Key Information Disclosure via Inherited File PermissionsCVE-2026-44826.8 Medium
- rapid7 velociraptorRapid7 Velociraptor Improper Input Validation in Client Message HandlerCVE-2026-53298.5 High
- rapid7 insight agentEval Injection in Rapid7 Insight AgentCVE-2026-48376.6 Medium
- rapid7 vulnerability managementRapid7 InsightVM Signature Validation VulnerabilityCVE-2026-15689.6 Critical
- rapid7 insightvm/nexposeRapid7 Nexpose Insecure Java Keystore Password GenerationCVE-2026-1814Public exploit6.8 Medium
- rapid7 velociraptorRapid7 Velociraptor Directory Traversal VulnerabilityCVE-2025-147286.8 Medium
- rapid7 appspider proRapid7 AppSpider Project Name Validation BypassCVE-2025-111953.3 Low
- rapid7 appspider proRapid7 Appspider Broken Access Control VulnerabilityCVE-2025-368573.3 Low
- rapid7 velociraptorVelociraptor priviledge escalation via UpdateConfig artifactCVE-2025-6264Public exploitFix available5.5 Medium
- rapid7 appspider proEditions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site...CVE-2025-49514.6 Medium
- rapid7 velociraptorVelociraptor Shell Plugin Prevent_execve BypassCVE-2025-09143.8 Low
- rapid7 insight platformRapid7 Insight Platform Privilege Escalation VulnerabilityCVE-2024-114015.3 Medium
- rapid7 velociraptorRapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor ServiceCVE-2024-105268.6 High
- rapid7 insight platformRapid7 Insight Platform Unauthorized Empty Group CreationCVE-2024-80422.4 Low
- rapid7 insightvmRapid7 InsightVM Protection Mechanism FailureCVE-2024-65044.3 Medium
- rapid7 insight agent, insightvm +1 moreRapid7 Insight Agent Sensitive Key Exposed To Local UsersCVE-2024-31856.8 Medium
- mphrx minerva, rapid7 minerva armor +1 moreRapid7 Minerva Armor Privilege EscalationCVE-2024-03947.8 High
- rapid7 insightvmRapid7 InsightVM Sensitive Information Exposure via URLCVE-2024-27453.3 Low
- rapid7 velociraptorRapid7 Velociraptor Reflected XSSCVE-2023-59508.6 High
- rapid7 insight agentRapid7 Insight Agent Directory TraversalCVE-2023-22735.8 Medium
- rapid7 velociraptorVelociraptor crashes while parsing some malformed PE or OLE files.CVE-2023-22263.3 Low
- rapid7 nexposeRapid7 Nexpose Forced BrowsingCVE-2023-16994.3 Medium
- rapid7 insightvmRapid7 InsightVM Insufficient Session ExpirationCVE-2021-38445.7 Medium
- rapid7 insightcloudsec, insightappsec +1 moreRapid7 InsightCloudSec resource.db() method accessCVE-2023-13068.8 High
- rapid7 insightcloudsec, insightappsec +1 moreRapid7 InsightCloudSec box object accessCVE-2023-13058.1 High
- rapid7 insightcloudsec, insightappsec +1 moreRapid7 InsightCloudSec getattr() method accessCVE-2023-13048.8 High
- rapid7 insightvm, nexpose +1 moreRapid7 Nexpose Uncontrolled URL RedirectCVE-2023-06814.3 Medium
- rapid7 metasploit, metasploit pro +1 moreRapid7 Metasploit Pro Stored XSSCVE-2023-05996.1 Medium
- rapid7 insightvm, nexpose +1 moreRapid7 Nexpose Certificate Validation IssueCVE-2022-39135.3 Medium
- rapid7 velociraptorRapid7 Velociraptor directory traversal in client ID parameterCVE-2023-0290Fix available4.3 Medium
- rapid7 velociraptorInsufficient permission check in the VQL copy() functionCVE-2023-0242Fix available8.8 High
- rapid7 insightvm, insightvm virtual appliance, nexpose virtual appliance +2 moreRapid7 Nexpose Virtual Appliance Duplicate SSH Host KeyCVE-2017-52427.7 High
- rapid7 insightvm, nexpose +1 moreRapid7 Nexpose Update Validation IssueCVE-2022-42614.4 Medium
- rapid7 insightvmRapid7 InsightVM Information Disclosure after LogoutCVE-2019-56413.3 Low
- rapid7 velociraptorXSS in User InterfaceCVE-2022-356324.8 Medium
- rapid7 velociraptorFilesystem race on temporary filesCVE-2022-356315.5 Medium
- rapid7 velociraptorUnsafe HTML Injection in Artifact Collection ReportCVE-2022-356306.1 Medium
- rapid7 velociraptorVelociraptor Client ID SpoofingCVE-2022-356295.4 Medium
- rapid7 nexposeRapid7 Nexpose Reflected XSSCVE-2022-07583.3 Low
- rapid7 nexposeRapid7 Nexpose SQL InjectionCVE-2022-07575.5 Medium
- rapid7 insight agentRapid7 Insight Agent Privilege EscalationCVE-2022-02374.0 Medium
- rapid7 insight agentRapid7 Insight Agent Improper Access ControlCVE-2021-40164.0 Medium
- rapid7 insight agentRapid7 Insight Agent Privilege EscalationCVE-2021-40077.8 High
- rapid7 nexposeRapid7 Nexpose Information Disclosure after logoutCVE-2019-56403.3 Low
- Show moreLoading…