CVE-2019-5630medium

CVE-2019-5630: medium-severity vulnerability in Rapid7 Nexpose/InsightVM Security Console

Rapid7 Nexpose/InsightVM Security Console CSRF

Published · Updated

Follow this CVE+ Monitor Nexpose/InsightVM Security Console

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.9%
A Cross-Site Request Forgery (CSRF) vulnerability was found in Rapid7 Nexpose InsightVM Security Console versions 6.5.0 through 6.5.68. This issue allows attackers to exploit CSRF vulnerabilities on API endpoints using Flash to circumvent a cross-domain pre-flight OPTIONS request.
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
Affected products
Rapid7 · Nexpose/InsightVM Security Console