Product by Rapid7
Rapid7 Metasploit
17 known vulnerabilities in Rapid7 Metasploit (Rapid7), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-5645 | Rapid7 Metasploit HTTP Handler Denial of Service | 7.5 | |
| High | CVE-2020-7384 | Client-Side Command Injection in Rapid7 Metasploit | 7.0 | |
| High | CVE-2020-7350 | Metasploit Framework Plugin Libnotify Command Injection | 6.1 | |
| High | CVE-2019-5624 | Rapid7 Metasploit Framework Zip Import Directory Traversal | 7.4 | |
| High | CVE-2020-7385 | Metasploit Framework 'drb_remote_codeexec' code execution | 8.1 | |
| Medium | CVE-2017-15084 | Rapid7 Metasploit: Cross-Site Request Forgery (CSRF) | 6.5 | |
| High | CVE-2020-7377 | Rapid7 Metasploit Framework Relative Path Traversal in telpho10_credential_dump module | 8.1 | |
| High | CVE-2017-5231 | Rapid7 Metasploit: Path Traversal | 7.1 | |
| High | CVE-2017-5229 | Rapid7 Metasploit: Path Traversal | 7.1 | |
| High | CVE-2017-5228 | Rapid7 Metasploit: Path Traversal | 7.1 | |
| Critical | CVE-2020-7376 | Rapid7 Metasploit Framework Relative Path Traversal in enum_osx module | 7.1 | |
| High | CVE-2017-5235 | Rapid7 Metasploit Pro: security vulnerability | 7.8 | |
| Medium | CVE-2020-7355 | Rapid7 Metasploit Pro Stored XSS in 'notes' field | 6.1 | |
| Medium | CVE-2020-7354 | Rapid7 Metasploit Pro Stored XSS in 'host' field | 6.1 | |
| Low | CVE-2017-5244 | Rapid7 Metasploit: Cross-Site Request Forgery (CSRF) | 3.5 | |
| Medium | CVE-2023-0599 | Rapid7 Metasploit Pro Stored XSS | 6.1 | |
| Low | CVE-2019-5642 | Rapid7 Metasploit Pro: Incorrect Permission Assignment for Critical Resource | 3.3 |