How many rapid7 insightvm CVEs are in CISA KEV?

None of rapid7 insightvm's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of rapid7 insightvm are affected?

24 distinct rapid7 insightvm versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in rapid7 insightvm CVEs?

rapid7 insightvm's CVEs most often map to these CWE weakness types: CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-250 (Execution with Unnecessary Privileges), CWE-257 (Storing Passwords in a Recoverable Format).

What is the average severity of rapid7 insightvm CVEs?

The average CVSS base score across rapid7 insightvm's scored CVEs is 6.0.

RadicalNotion.AI

Log in Create an account

rapid7

11 CVEs

rapid7 insightvm Vulnerabilities

Name: rapid7 insightvm vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for insightvm by rapid7.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.0

Avg CVSS

2019–2026

Last updated July 24, 2026

Overview

rapid7 insightvm has 11 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.0. Affected platforms include linux, macos, windows.

Severity and exploitation

How the CVSS severity of rapid7 insightvm's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium8

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of rapid7 insightvm's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of rapid7 insightvm's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every rapid7 insightvm version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.1.39351 CVE
< 6.5.501 CVE
< 6.6.1721 CVE
< 6.6.1791 CVE
< 6.6.2441 CVE
< 6.6.2451 CVE
< 6.6.2611 CVE
<= 6.6.1601 CVE
<= 6.6.1711 CVE
2017-04-05 <= v <= 2017-05-031 CVE
6.5.11 <= v < 6.5.11*1 CVE
6.5.11 <= v <= 6.5.491 CVE
6.5.49 <= v <= 6.5.491 CVE
6.6.160 <= v <= 6.6.1601 CVE
6.6.82 <= v < 6.6.1781 CVE

Fixed in

1.1.39351 CVE
6.5.11*1 CVE
6.5.501 CVE
6.6.1721 CVE
6.6.1781 CVE
6.6.1791 CVE
6.6.2441 CVE
6.6.2451 CVE
6.6.2611 CVE

Find a version

11 CVEs

Sort

Rapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation
CVE-2026-14172
Patch
CWE-250
High · CVSS 7.8
EPSS 0.2% (4th pct)2026-07-24
Rapid7 InsightVM Protection Mechanism Failure
CVE-2024-6504
Patch
CWE-770
Medium · CVSS 5.3
EPSS 0.3% (23th pct)2024-07-18
Medium vulnerability · 2024-04-23
CVE-2024-3185
Public exploit
Patch
CWE-1284
Medium · CVSS 6.8
EPSS 0.2% (6th pct)2024-04-23
Low vulnerability · 2024-04-02
CVE-2024-2745
Patch
CWE-598
Low · CVSS 3.3
EPSS 0.2% (7th pct)2024-04-02
Rapid7 InsightVM Insufficient Session Expiration
CVE-2021-3844
Patch
CWE-613
Medium · CVSS 5.7
EPSS 0.4% (28th pct)2023-03-24
Rapid7 Nexpose Uncontrolled URL Redirect
CVE-2023-0681
Patch
CWE-601
Medium · CVSS 6.1
EPSS 0.3% (24th pct)2023-03-20
Medium vulnerability · 2023-02-01
CVE-2022-3913
Patch
CWE-295
Medium · CVSS 5.3
EPSS 0.3% (21th pct)2023-02-01
High vulnerability · 2023-01-12
CVE-2017-5242
Patch
CWE-321
High · CVSS 7.7
EPSS 0.4% (30th pct)2023-01-12
Medium vulnerability · 2022-12-07
CVE-2022-4261
Public exploit
Patch
CWE-494
Medium · CVSS 6.5
EPSS 0.3% (24th pct)2022-12-07
Rapid7 InsightVM Information Disclosure after Logout
CVE-2019-5641CWE-200
Medium · CVSS 5.3
EPSS 0.4% (31th pct)2022-09-21
Rapid7 InsightVM Stored Credential Exposure
CVE-2019-5615
Patch
CWE-257
Medium · CVSS 6.5
EPSS 0.8% (55th pct)2019-04-09

Common weakness types

The CWE weakness categories most often found in rapid7 insightvm CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many rapid7 insightvm CVEs were published each year.

2019

1

2022

2

2023

4

2024

3

2026

1

Other rapid7 products

Browse vulnerabilities for other products by rapid7.

metasploit-framework64 CVEs Velociraptor44 CVEs nexpose22 CVEs metasploit17 CVEs Insight Agent11 CVEs Metasploit Framework8 CVEs appspider pro6 CVEs Metasploit Pro6 CVEs

All rapid7 vulnerabilities

Frequently asked questions

Common questions about rapid7 insightvm vulnerabilities.

How many CVEs does rapid7 insightvm have?: rapid7 insightvm has 11 published CVE records since 2019.
How many rapid7 insightvm CVEs are in CISA KEV?: None of rapid7 insightvm's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for rapid7 insightvm vulnerabilities?: Yes — 2 of rapid7 insightvm's CVEs have a known public exploit.
Which versions of rapid7 insightvm are affected?: 24 distinct rapid7 insightvm versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in rapid7 insightvm CVEs?: rapid7 insightvm's CVEs most often map to these CWE weakness types: CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-250 (Execution with Unnecessary Privileges), CWE-257 (Storing Passwords in a Recoverable Format).
What is the average severity of rapid7 insightvm CVEs?: The average CVSS base score across rapid7 insightvm's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track rapid7 insightvm vulnerabilities

Get an alert for each new rapid7 insightvm CVE, with AI-written analysis and remediation steps.

Create an account See pricing