Metasploit Metasploit Framework — known CVE vulnerabilities

Every CVE whose affected-product data names Metasploit Metasploit Framework, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2011-1056 — CVSS 6.2 (medium): The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation…
• CVE-2005-2482 — CVSS 5.0 (medium): The StateToOptions function in msfweb in Metasploit Framework 2.4 and earlier, when running with the -D option (defanged mode), allows…