Skip to content

Product

Rapid7 Insight Platform vulnerabilities

2 published CVES affecting Rapid7 Insight Platform, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest Rapid7 Insight Platform CVEs

Newest publication first

  1. CVE-2024-11401 Rapid7 Insight Platform Privilege Escalation Vulnerability

    Published
    MediumCVSS 5.3 EPSS 0.34%

    Rapid7 Insight Platform versions prior to November 13th 2024, suffer from a privilege escalation vulnerability whereby, due to a lack of authorization checks, an attacker can successfully update the password policy in the platform settings as a standard user by crafting an API (t...

  2. CVE-2024-8042 Rapid7 Insight Platform Unauthorized Empty Group Creation

    Published
    LowCVSS 3.1 EPSS 0.18%

    Rapid7 Insight Platform versions between November 2019 and August 14, 2024 suffer from missing authorization issues whereby an attacker can intercept local requests to set the name and description of a new user group. This could potentially lead to an empty user group being added...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.