Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Rapid7 Component: Appspider Pro Clear all filters
TI-2025-10256 CVE-2025-11195 · GHSA-x5c4-2c4m-rfj5

Rapid7 AppSpider Project Name Validation Bypass

Priority LOW 15

Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00092 Published 2025-09-30 Fixed in 7.5.021 CWE-20
TI-2025-24951 CVE-2025-36857 · GHSA-2q6q-r7wh-h8q5

Rapid7 Appspider Broken Access Control Vulnerability

Priority LOW 15

Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker can place files in directories belonging to ot…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00124 Published 2025-09-25 Fixed in 7.5.021 CWE-276
TI-2025-04439 CVE-2025-4951 · GHSA-f252-qh43-5v8p

Cross-site scripting in Rapid7 AppSpider Pro

Priority LOW 21

Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field.

CVSS 3.1MEDIUM 4.6 Local Low privileges User interaction EPSS 0.00197 Published 2025-05-20 Fixed in 7.5.018 CWE-79
TI-2017-03351 CVE-2017-5240 · GHSA-fmgr-jrjf-26r6

Memory corruption in Rapid7 AppSpider Pro

Priority LOW 35

Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01028 Published 2017-05-03 Fixed in 6.14.060 CWE-119
TI-2017-03347 CVE-2017-5236 · GHSA-jxg9-2w2r-prxg

Untrusted search path in Rapid7 AppSpider Pro

Priority LOW 36

Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of t…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0093 Published 2017-05-03 Fixed in 6.14.060 CWE-426
TI-2017-03344 CVE-2017-5233 · GHSA-2468-4cfj-qfq3

Untrusted search path in Rapid7 AppSpider Pro

Priority LOW 36

Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00875 Published 2017-03-02 No fix listed CWE-426