CVE-2024-6504

Rapid7 InsightVM Console versions below 6.6.260 suffer from a protection mechanism failure whereby an attacker with network access to the InsightVM Console can cause it to overload or crash by sending repeated invalid REST requests in a short timeframe, to the Console's port 443 causing the conso...

PT-2024-37675 · Rapid7 · Rapid7 Insightvm Console

Name of the Vulnerable Software and Affected Versions: Rapid7 InsightVM Console versions prior to 6.6.261 Description: The issue is related to a protection mechanism failure, where an attacker with network access can cause the console to overload or crash by sending repeated invalid REST requests...

Rapid7 Nexpose InsightVM Security Console Cross-Site Request Forgery Vulnerability

Rapid7 Nexpose InsightVM Security Console is a local vulnerability scanning program from Rapid7 USA. A cross-site request forgery vulnerability exists in Rapid7 Nexpose InsightVM Security Console versions 6.5.0 through 6.5.68. The vulnerability stems from a WEB application that does not adequatel...