AP
Product
Appspider Pro
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 2
Watch
Add Appspider Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5236 | 7.8 | May 3 | Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL… Affected: through 6.14.059 |
| CVE-2017-5233 | 7.8 | Mar 2 | Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the… Affected: before 6.14.053 |
| CVE-2017-5240 | 7.5 | May 3 | Editions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow in the FLAnalyzer.exe component Affected: through 6.14.059 |
| CVE-2025-4951 | 4.6 | May 20 | Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field Affected: before 7.5.018 |
| CVE-2025-11195 | 3.3 | Sep 30 | Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file… Affected: before 7.5.021 |
| CVE-2025-36857 | 3.3 | Sep 25 | Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker… Affected: before 7.5.021 |
Showing 6