Advisories · Technology
Rapid7 Metasploit Framework.
Every CVE that names Rapid7 Metasploit Framework among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authentication
- Rapid7 Metasploit Framework
- Authentication bypass
- CVSS 4.7 Medium
Metasploit Framework HTTP Redirect Server-Side Request Forgery
- Rapid7 Metasploit Framework
- Server-side request forgery (SSRF)
- CVSS 4.7 Medium
Metasploit Framework FTP PASV Response SSRF
- Rapid7 Metasploit Framework
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints
- Rapid7 Metasploit Framework
- Authentication bypass
- CVSS 8.8 High
Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution
- Rapid7 Metasploit Framework
- Path traversal
- CVSS 5.1 Medium
Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails
- Rapid7 Metasploit-framework
- CWE-305
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Rapid7 Metasploit HTTP Handler Denial of Service
- Rapid7 Metasploit Framework
- Denial of service
- CVSS 8.1 High
Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module
- Rapid7 Metasploit Framework
- Path traversal
- CVSS 7.1 High
Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module
- Rapid7 Metasploit Framework
- Path traversal
- CVSS 6.1 Medium
Metasploit Framework Plugin Libnotify Command Injection
- Rapid7 Metasploit Framework
- Command injection
- CVSS 7.4 High
Rapid7 Metasploit Framework Zip Import Directory Traversal
- Rapid7 Metasploit Framework
- Path traversal