Rapid7 Nexpose vulnerabilities

CVEs per yearBy the year they were published

1. 20161
2. 20173
3. 20191
4. 20203
5. 20212
6. 20223
7. 20233
8. 20261

Newest CVEs

• CVE-2026-14172

  Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation

  Rapid7 · InsightVM

  High7.8
• CVE-2023-1699

  Rapid7 Nexpose Forced Browsing

  Rapid7 · Nexpose

  Medium4.3
• CVE-2023-0681

  Rapid7 Nexpose Uncontrolled URL Redirect

  Rapid7 · Nexpose

  Medium4.3
• CVE-2022-3913

  Rapid7 Nexpose Certificate Validation Issue

  Rapid7 · Nexpose

  Medium5.3
• CVE-2022-4261

  Rapid7 Nexpose Update Validation Issue

  Rapid7 · Nexpose

  Medium4.4
• CVE-2022-0758

  Rapid7 Nexpose Reflected XSS

  Rapid7 · Nexpose

  Low3.3
• CVE-2022-0757

  Rapid7 Nexpose SQL Injection

  Rapid7 · Nexpose

  Medium5.5
• CVE-2019-5640

  Rapid7 Nexpose Information Disclosure after logout

  Rapid7 · Nexpose

  Low3.3
• CVE-2021-31868

  Rapid7 Nexpose Security Console Ticket Access Authentication Vulnerability

  Rapid7 · Nexpose

  Medium4.3
• CVE-2020-7383

  SQL Injection in Rapid7 Nexpose

  Rapid7 · Nexpose

  Medium6.5