Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2020-7382

Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.

  • Published: Sep 3, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-7382
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.8
  • AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.4
  • AV:L/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
rapid7 / nexpose - 6.6.40