Rapid7 AppSpider Pro

• CVE-2025-11195 Low 3.3 Rapid7 AppSpider Project Name Validation Bypass <0.1%
• CVE-2025-36857 Low 3.3 Rapid7 Appspider Broken Access Control Vulnerability 0.1%
• CVE-2025-4951 Medium 4.6 Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the application preventing the inclusion of specia 0.2%