Advisories · Technology

Rapid7 AppSpider.

Every CVE that names Rapid7 AppSpider among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-7358 CVE record

CVSS 5.8 Medium

Code Injection in Rapid7 AppSpider Pro Installer
- Rapid7 AppSpider
- CWE-427
Not analysed yet 18 Sept 2020
CVE-2019-5647 CVE record

CVSS 4.4 Medium

Rapid7 AppSpider Chrome Plugin Insufficient Session Expiration
- Rapid7 AppSpider
- Authentication bypass
Not analysed yet 22 Jan 2020