Advisories · Technology

Rapid7 Metasploit Pro.

Every CVE that names Rapid7 Metasploit Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-7373 CVE record

CVSS 8.5 High

Metasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading
- Rapid7 Metasploit Pro
- Broken access control
- CWE-427
Not analysed yet 15 May 2026
CVE-2023-0599 CVE record

CVSS 6.1 Medium

Rapid7 Metasploit Pro Stored XSS
- Rapid7 Metasploit Pro
- Cross-site scripting (XSS)
Not analysed yet 1 Feb 2023
CVE-2020-7355 CVE record

CVSS 6.1 Medium

Rapid7 Metasploit Pro Stored XSS in 'notes' field
- Rapid7 Metasploit Pro
- Cross-site scripting (XSS)
Not analysed yet 25 Jun 2020
CVE-2020-7354 CVE record

CVSS 6.1 Medium

Rapid7 Metasploit Pro Stored XSS in 'host' field
- Rapid7 Metasploit Pro
- Cross-site scripting (XSS)
Not analysed yet 25 Jun 2020
CVE-2019-5642 CVE record

CVSS 3.3 Low

MAGICK
- Rapid7 Metasploit Pro
- Broken access control
Not analysed yet 6 Nov 2019
CVE-2017-5235 CVE record

Rapid7 Metasploit Pro: Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL…
- Rapid7 Metasploit Pro
Not analysed yet 2 Mar 2017