IN
Product
InsightVM
10
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 7Low 1
Watch
Add InsightVM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3185 | 6.8 | Apr 23 | Rapid7 Insight Agent Sensitive Key Exposed To Local Users Affected: before 6.6.245 |
| CVE-2022-4261 | 6.5 | Dec 8 | Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents Affected: before 6.6.172 |
| CVE-2019-5615 | 6.5 | Apr 9 | Users with Site-level permissions can access files containing the username-encrypted passwords of Security Console Global Administrators and clear-text passwords for restoring… Affected: 6.5.11 through 6.5.49 |
| CVE-2023-0681 | 6.1 | Mar 20 | Rapid7 InsightVM versions 6.6.178 and lower suffers from an open redirect vulnerability, whereby an attacker has the ability to redirect the user to a site of the attacker’s… Affected: before 6.6.179 |
| CVE-2021-3844 | 5.4 | Mar 24 | Rapid7 InsightVM suffers from insufficient session expiration when an administrator performs a security relevant edit on an existing, logged on user Affected: before 6.5.50 |
| CVE-2024-6504 | 5.3 | Jul 18 | Rapid7 InsightVM Protection Mechanism Failure Affected: before 6.6.261 |
| CVE-2019-5641 | 5.3 | Sep 21 | Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the Inspect Element browser feature… Affected: through 6.6.160 |
Showing 7