CVE-2023-1699

概要

参考情報

• docs.rapid7.com/release-notes/nexpose/20230329 · Release Notes

nexpose のその他の脆弱性

• CVE-2022-3913中 5.3Rapid7 Nexpose and InsightVM versions 6.6.82 through 6.6.177 fail to validate the certificate of the update server when downloading updates.…
• CVE-2022-4261中 6.5Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents. This failure could a…
• CVE-2022-0758中 6.1Rapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the shared scan configuration…
• CVE-2022-0757高 8.8Rapid7 Nexpose versions 6.6.93 and earlier are susceptible to an SQL Injection vulnerability, whereby valid search operators are not defined…
• CVE-2019-5640中 5.3Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactiv…