Advisories · Technology
Rapid7 InsightVM.
Every CVE that names Rapid7 InsightVM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation
- Rapid7 InsightVM
- Rapid7 Nexpose
- Privilege escalation
- CVSS 4.3 Medium
Rapid7 InsightVM Protection Mechanism Failure
- Rapid7 InsightVM
- Denial of service
- CVSS 3.3 Low
Rapid7 InsightVM Sensitive Information Exposure via URL
- Rapid7 InsightVM
- CWE-598
- CVSS 5.7 Medium
Rapid7 InsightVM Insufficient Session Expiration
- Rapid7 InsightVM
- Authentication bypass
- CVSS 5.3 Medium
Rapid7 Nexpose Certificate Validation Issue
- Rapid7 Nexpose
- Rapid7 InsightVM
- Weak cryptography or TLS
- CVSS 4.4 Medium
Rapid7 Nexpose Update Validation Issue
- Rapid7 Nexpose
- Rapid7 InsightVM
- CWE-494
- CVSS 3.3 Low
Rapid7 InsightVM Information Disclosure after Logout
- Rapid7 InsightVM
- Information disclosure
- CVSS 3.1 Low
Rapid7 InsightVM Stored Credential Exposure
- Rapid7 InsightVM
- CWE-257