Login Request a demo
ME
Product
Metasploit
by Rapid7 · last CVE Feb 1, 2023
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 1High 10Medium 4Low 2
Severity
All severities17Critical1High10Medium4Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Metasploit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-15084
6.5
1%
Oct 6
The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22
Affected: through 4.14.1
CVE-2020-7355
6.1
1%
Jun 25
Cross-site Scripting (XSS) vulnerability in the 'notes' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a…
Affected: before 4.17.1; 4.17.1; 4.17.1; 4.17.1; 4.17.1; 4.17.1; +34 more
CVE-2020-7354
5.4
1%
Jun 25
Cross-site Scripting (XSS) vulnerability in the 'host' field of a discovered scan asset in Rapid7 Metasploit Pro allows an attacker with a specially-crafted network service of a…
Affected: before 4.17.1; 4.17.1; 4.17.1; 4.17.1; 4.17.1; 4.17.1; +34 more
CVE-2023-0599
4.8
0%
Feb 1
Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization.  Using this…
Affected: through 4.21.2
Showing 4