Advisories · Technology

Rapid7 AppSpider Pro.

Every CVE that names Rapid7 AppSpider Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-11195 CVE record

CVSS 3.3 Low

Rapid7 AppSpider Project Name Validation Bypass
- Rapid7 AppSpider Pro
- CWE-20
- CWE-345
Not analysed yet 30 Sept 2025
CVE-2025-36857 CVE record

CVSS 3.3 Low

Rapid7 Appspider Broken Access Control Vulnerability
- Rapid7 Appspider Pro
- Broken access control
Not analysed yet 25 Sept 2025
CVE-2025-4951 CVE record

CVSS 4.6 Medium

Cross-site scripting in Rapid7 AppSpider Pro
- Rapid7 AppSpider Pro
- Cross-site scripting (XSS)
Not analysed yet 20 May 2025
CVE-2017-5240 CVE record

Rapid7 AppSpider Pro: Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer…
- Rapid7 AppSpider Pro
Not analysed yet 3 May 2017
CVE-2017-5236 CVE record

Rapid7 AppSpider Pro: Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL…
- Rapid7 AppSpider Pro
Not analysed yet 3 May 2017
CVE-2017-5233 CVE record

Rapid7 AppSpider Pro: Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading…
- Rapid7 AppSpider Pro
Not analysed yet 2 Mar 2017