CVE-2020-7382

6.5 mediumEPSS 0.3%

Medium (6.5) in rapid7 nexpose. EPSS 0.3% chance of exploitation in the next 30 days.

Rapid7 Nexpose installer version prior to 6.6.40 contains an Unquoted Search Path which may allow an attacker on the local machine to insert an arbitrary file into the executable path. This issue affects: Rapid7 Nexpose versions prior to 6.6.40.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-428
Published: 2020-09-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rapid7:nexpose

References

https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.40
https://help.rapid7.com/insightvm/en-us/release-notes/index.html?pid=6.6.40

Check your stack JSON