CVE-2020-7383: RAPID7 Nexpose

High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days.

A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.

Affected products

• RAPID7 Nexpose: before 6.6.49 (fixed in 6.6.49)

Published 2020-10-14. Last modified 2026-06-17.