Nexpose

This hub aggregates every CVE we track for Nexpose, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Nexpose.

• CVE-2026-14172Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation7.8Jul 24, 2026
• CVE-2023-1699Rapid7 Nexpose Forced Browsing4.3Mar 30, 2023
• CVE-2023-0681Rapid7 Nexpose Uncontrolled URL Redirect4.3Mar 20, 2023
• CVE-2022-3913Rapid7 Nexpose Certificate Validation Issue5.3Feb 1, 2023
• CVE-2022-4261Rapid7 Nexpose Update Validation Issue4.4Dec 7, 2022
• CVE-2022-0758Rapid7 Nexpose Reflected XSS3.3Mar 17, 2022
• CVE-2022-0757Rapid7 Nexpose SQL Injection5.5Mar 17, 2022
• CVE-2019-5640Rapid7 Nexpose Information Disclosure after logout3.3Nov 22, 2021
• CVE-2021-31868Rapid7 Nexpose Security Console Ticket Access Authentication Vulnerability4.3Aug 19, 2021
• CVE-2021-3535Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the Security Console's Filtered Asset Search feature. A specific search criterion and operator combinat...4.3Jun 16, 2021
• CVE-2020-7383SQL Injection in Rapid7 Nexpose6.5Oct 14, 2020
• CVE-2020-7382Unquoted Path in Rapid7 Nexpose Installer6.8Sep 3, 2020
• CVE-2020-7381Code Injection in Rapid7 Nexpose Installer5.8Sep 3, 2020
• CVE-2012-6494Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's session and gain unauthorized access.6.1Jan 25, 2020
• CVE-2019-5638Rapid7 Nexpose Insufficient Session Management8.7Aug 21, 2019