CVE-2021-31868

概要

参考情報

• docs.rapid7.com/release-notes/nexpose/20210804 · Release Notes

nexpose のその他の脆弱性

• CVE-2023-1699緊急 9.8Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability.  This vulnerability allows an attacker to manipulate …
• CVE-2022-3913中 5.3Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177 fail to validate the certificate of the update server when downloading updates.…
• CVE-2022-4261中 6.5Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents. This failure could a…
• CVE-2022-0758中 6.1Rapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the shared scan configuration…
• CVE-2022-0757高 8.8Rapid7 Nexpose versions 6.6.93 and earlier are susceptible to an SQL Injection vulnerability, whereby valid search operators are not defined…