Is CVE-2022-0758 being actively exploited?

CVE-2022-0758 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2022-0758?

CVE-2022-0758 has a CVSS 3.1 base score of 3.3 (LOW).

CVE-2022-0758

LOW · CVSS 3.3EPSS 0.4%EU EUVD

Rapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the shared scan configuration component of the tool. With this vulnerability an attacker could pass literal values as the test credentials, providing the opportunity for a potential XSS attack. This issue is fixed in Rapid7 Nexpose version 6.6.130.

Key facts

CVSS score: 3.3 (v3.1)
Severity: LOW
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness (CWE): CWE-79
EPSS score: 0.4% (35th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2022-15821)
Published: March 17, 2022
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2022-15821 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.

View on the EU Vulnerability Database

Affected products

rapid7 / nexpose

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Rapid7™ Nexpose™ Vulnerability Management and Penetration Testing System V5.1 - Rapid7 LLC - Common Criteria 383-4-148 - archived

References

https://docs.rapid7.com/release-notes/nexpose/20220309/(Release Notes, Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain