Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2012-6493

Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.8%
CVSS Severity
CVSS v2 Score 6.8
Products affected by CVE-2012-6493
  • Rapid7 » Nexpose » Version: N/A
    cpe:2.3:a:rapid7:nexpose:-
  • Rapid7 » Nexpose » Version: 5.4
    cpe:2.3:a:rapid7:nexpose:5.4
  • Rapid7 » Nexpose » Version: 5.4.1
    cpe:2.3:a:rapid7:nexpose:5.4.1
  • Rapid7 » Nexpose » Version: 5.4.10
    cpe:2.3:a:rapid7:nexpose:5.4.10
  • Rapid7 » Nexpose » Version: 5.4.11
    cpe:2.3:a:rapid7:nexpose:5.4.11
  • Rapid7 » Nexpose » Version: 5.4.12
    cpe:2.3:a:rapid7:nexpose:5.4.12
  • Rapid7 » Nexpose » Version: 5.4.2
    cpe:2.3:a:rapid7:nexpose:5.4.2
  • Rapid7 » Nexpose » Version: 5.4.3
    cpe:2.3:a:rapid7:nexpose:5.4.3
  • Rapid7 » Nexpose » Version: 5.4.4
    cpe:2.3:a:rapid7:nexpose:5.4.4
  • Rapid7 » Nexpose » Version: 5.4.5
    cpe:2.3:a:rapid7:nexpose:5.4.5
  • Rapid7 » Nexpose » Version: 5.4.6
    cpe:2.3:a:rapid7:nexpose:5.4.6
  • Rapid7 » Nexpose » Version: 5.4.7
    cpe:2.3:a:rapid7:nexpose:5.4.7
  • Rapid7 » Nexpose » Version: 5.4.8
    cpe:2.3:a:rapid7:nexpose:5.4.8
  • Rapid7 » Nexpose » Version: 5.4.9
    cpe:2.3:a:rapid7:nexpose:5.4.9
  • Rapid7 » Nexpose » Version: 5.5.1
    cpe:2.3:a:rapid7:nexpose:5.5.1
  • Rapid7 » Nexpose » Version: 5.5.3
    cpe:2.3:a:rapid7:nexpose:5.5.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved