What is the CVSS score of CVE-2025-11195?

CVE-2025-11195 has a CVSS 3.1 base score of 3.3 (Low). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Appspider Pro are affected by CVE-2025-11195?

CVE-2025-11195 is a low-severity vulnerability involving input validation (CVSS 3.3).

How to fix or mitigate CVE-2025-11195?

During next maintenance window: Apply vendor patches when convenient. Verify input validation controls are in place.

Appspider Pro CVE-2025-11195

LOW

Improper Input Validation (CWE-20)

2025-09-30 cve@rapid7.com

Information Disclosure Appspider Pro

3.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:15 vuln.today

CVE Published

Sep 30, 2025 - 18:15 nvd

LOW 3.3

DescriptionCVE.org

Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project names when editing them outside the application in affected versions. This vulnerability was remediated in version 7.5.021 of the product.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-20. Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project names when editing them outside the application in affected versions. This vulnerability was remediated in version 7.5.021 of the product. Affected products include: Rapid7 Appspider Pro. Version information: version 7.5.021.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.