Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Rapid7 — Vulnerabilities & Security Advisories 118

Browse all 118 CVE security advisories affecting Rapid7. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rapid7 operates primarily as a provider of security analytics and vulnerability management solutions, focusing on helping organizations identify, prioritize, and remediate security risks. Historically, its software products have exhibited vulnerabilities typical of complex enterprise applications, including remote code execution, cross-site scripting, and privilege escalation flaws. These issues often stem from improper input validation or insecure default configurations within its InsightVM and Metasploit frameworks. While the company maintains a robust security posture and actively patches disclosed issues, the high volume of recorded CVEs reflects the extensive attack surface inherent in its comprehensive toolset. Notable incidents have generally been resolved through prompt updates, though the frequency of findings underscores the challenges of securing large-scale, feature-rich security platforms. Continuous monitoring and strict access controls remain critical for mitigating these persistent risks.

Found 34 results / 118 Clear Filters
Top products by Rapid7: Velociraptor Nexpose Insight Agent AppSpider Pro Metasploit Pro Metasploit Framework InsightVM Metasploit InsightCloudSec InsightConnect Sed Plugin AppSpider Insight Platform InsightVM/Nexpose InsightConnect TR Plugin InsightConnect Tcpdump Plugin InsightConnect RPM Plugin InsightConnect Compression Plugin InsightConnect Markdown Plugin InsightConnect AWK Plugin InsightConnect Traceroute Plugin InsightConnect SQLmap Plugin InsightConnect Finger Plugin InsightConnect Ping Plugin Vulnerability Management Komand Minerva Insight Collector Rapid7 Nexpose InsightAppSec Nexpose/InsightVM Security Console
CVE ID Title CVSS Severity Published
CVE-2022-35631 Filesystem race on temporary files — Velociraptor CWE-377 5.5 - 2022-07-29
CVE-2022-35630 Unsafe HTML Injection in Artifact Collection Report — Velociraptor CWE-79 5.4 - 2022-07-29
CVE-2022-35629 Velociraptor Client ID Spoofing — Velociraptor CWE-287 4.3 - 2022-07-29
CVE-2021-3619 Rapid7 Velociraptor Notebooks Authenticated Persistent XSS — Velociraptor CWE-79 3.5 Low 2021-08-17

This page lists every published CVE security advisory associated with Rapid7. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.