Rapid7 InsightVM vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20222
3. 20232
4. 20242
5. 20261

Newest CVEs

• CVE-2026-14172

  Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation

  Rapid7 · InsightVM

  High7.8
• CVE-2024-6504

  Rapid7 InsightVM Protection Mechanism Failure

  Rapid7 · InsightVM

  Medium4.3
• CVE-2024-2745

  Rapid7 InsightVM Sensitive Information Exposure via URL

  Rapid7 · InsightVM

  Low3.3
• CVE-2021-3844

  Rapid7 InsightVM Insufficient Session Expiration

  Rapid7 · InsightVM

  Medium5.7
• CVE-2022-3913

  Rapid7 Nexpose Certificate Validation Issue

  Rapid7 · Nexpose

  Medium5.3
• CVE-2022-4261

  Rapid7 Nexpose Update Validation Issue

  Rapid7 · Nexpose

  Medium4.4
• CVE-2019-5641

  Rapid7 InsightVM Information Disclosure after Logout

  Rapid7 · InsightVM

  Low3.3
• CVE-2019-5615

  Rapid7 InsightVM Stored Credential Exposure

  Rapid7 · InsightVM

  Low3.1