RA
Product
Remote Application Server
7
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Remote Application Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45894 | 10.0 | Dec 14 | The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code… Affected: before 19.2.23975 |
| CVE-2020-15860 | 9.9 | Jul 24 | Parallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code execution Affected: 17.1.1 |
| CVE-2022-40870 | 8.1 | Nov 22 | The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks Affected: 18.0 |
| CVE-2025-0413 | 7.8 | Feb 4 | Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability Affected: before 19.4.3.2-25228 |
| CVE-2017-9447 | 7.5 | Feb 28 | In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource… Affected: 15.5 |
| CVE-2020-8968 | 7.1 | Dec 17 | Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by… Affected: 15.5 through 17.0 |
| CVE-2020-35710 | 5.3 | Dec 25 | Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides… Affected: 18.0 |
Showing 7