Read the docs

Rapid7

Records140All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high62CVSS 7.0–8.9

Exploited now

Rapid7 records in CISA KEV

No Rapid7 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nexpose 20 records MEDIUM Metasploit 17 records MEDIUM Velociraptor 15 records MEDIUM Insight Agent 8 records MEDIUM Insightvm 8 records LOW Appspider Pro 6 records LOW Insightappsec 4 records HIGH Insightcloudsec 3 records HIGH

Records

6 records in Appspider Pro · all components

TI-2017-03347 CVE-2017-5236 · GHSA-jxg9-2w2r-prxg

Untrusted search path in Rapid7 AppSpider Pro

Priority LOW 36

Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of t…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0093 Published 2017-05-03 Fixed in 6.14.060 CWE-426
TI-2017-03344 CVE-2017-5233 · GHSA-2468-4cfj-qfq3

Untrusted search path in Rapid7 AppSpider Pro

Priority LOW 36

Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00875 Published 2017-03-02 No fix listed CWE-426
TI-2017-03351 CVE-2017-5240 · GHSA-fmgr-jrjf-26r6

Memory corruption in Rapid7 AppSpider Pro

Priority LOW 35

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01028 Published 2017-05-03 Fixed in 6.14.060 CWE-119
TI-2025-04439 CVE-2025-4951 · GHSA-f252-qh43-5v8p

Cross-site scripting in Rapid7 AppSpider Pro

Priority LOW 21

Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field.

CVSS 3.1MEDIUM 4.6 Local Low privileges User interaction EPSS 0.00197 Published 2025-05-20 Fixed in 7.5.018 CWE-79
TI-2025-24951 CVE-2025-36857 · GHSA-2q6q-r7wh-h8q5

Rapid7 Appspider Broken Access Control Vulnerability

Priority LOW 15

Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker can place files in directories belonging to ot…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00124 Published 2025-09-25 Fixed in 7.5.021 CWE-276
TI-2025-10256 CVE-2025-11195 · GHSA-x5c4-2c4m-rfj5

Rapid7 AppSpider Project Name Validation Bypass

Priority LOW 15

Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00092 Published 2025-09-30 Fixed in 7.5.021 CWE-20
Open these records in search →