← CVE Intelligence

CVE-2020-7383

SQL Injection in Rapid7 Nexpose PUBLISHED

Description (CNA)

A SQL Injection issue in Rapid7 Nexpose version prior to 6.6.49 that may have allowed an authenticated user with a low permission level to access resources & make changes they should not have been able to access.

Affected (CNA)

Vendor / productVersions
Rapid7 / Nexposeaffected unspecified before 6.6.49

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.