CVE-2023-1699 (published 2023-03-30T09:26:13.515Z)
Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability.  This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187.  
Affected products: Vendor: Rapid7
Product: Nexpose
Versions: 0