VULNERABILITY INTELLIGENCE

CVE-2020-7382

CVSS score6.8 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2020-09-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.

Weakness classification

  • cve@rapid7.com: CWE-428
  • nvd@nist.gov: CWE-428

Primary references