CVE-2021-31868

5.4 mediumEPSS 0.5%

Medium (5.4) in rapid7 nexpose. EPSS 0.5% chance of exploitation in the next 30 days.

Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket in the legacy ticketing feature, regardless of the assignment of the ticket. This issue was resolved in version 6.6.96, released on August 4, 2021.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2021-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

rapid7:nexpose

References

https://docs.rapid7.com/release-notes/nexpose/20210804/
https://docs.rapid7.com/release-notes/nexpose/20210804/

Check your stack JSON