CVE-2017-5235: vulnerability in Rapid7 Metasploit Pro
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.
Affected products
Rapid7 · Metasploit ProRelated CVEs — Rapid7 Metasploit Pro
In the same product, most dangerous first.
CVE-2020-7355MEDIUMRapid7 Metasploit Pro Stored XSS in 'notes' fieldEPSS 0.9%CVE-2020-7354MEDIUMRapid7 Metasploit Pro Stored XSS in 'host' fieldEPSS 0.9%CVE-2023-0599MEDIUMRapid7 Metasploit Pro Stored XSSEPSS 0.4%CVE-2019-5642LOWMAGICKEPSS 0.3%CVE-2026-7373HIGHMetasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File LoadingEPSS 0.2%