RO
Vendor
Rocketsoftware
33
CVEs
0
On KEV
0
New 30D
Products
UN9.8
Unidata
Rocketsoftware
9 CVEs0 on KEV0 new
UN9.8
Universe
Rocketsoftware
9 CVEs0 on KEV0 new
TE9.9
Trufusion Enterprise
Rocketsoftware
8 CVEs0 on KEV0 new
AG9.8
Ags-zena
Rocketsoftware
3 CVEs0 on KEV0 new
RS–
Rocket Servergraph
Rocketsoftware
2 CVEs0 on KEV0 new
TR9.8
Trufusion
Rocketsoftware
1 CVEs0 on KEV0 new
ZE7.3
Zena
Rocketsoftware
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-59793 | TE Trufusion Enterprise Rocketsoftware | 9.9 | Feb 17 | Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files |
| CVE-2025-32355 | TE Trufusion Enterprise Rocketsoftware | 7.3 | Feb 17 | Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections |
| CVE-2025-27225 | TE Trufusion Enterprise Rocketsoftware | 7.5 | Oct 27 | TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unauthenticated users |
| CVE-2025-27222 | TE Trufusion Enterprise Rocketsoftware | 8.6 | Oct 27 | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files |
| CVE-2025-27224 | TE Trufusion Enterprise Rocketsoftware | 9.8 | Oct 27 | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files |
| CVE-2025-27223 | TE Trufusion Enterprise Rocketsoftware | 7.5 | Oct 27 | TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints such as /trufusionPortal/getProjectList |
| CVE-2024-45955 | ZE Zena Rocketsoftware | 7.3 | Jul 30 | Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter |
| CVE-2023-28509 | UN Unidata Rocketsoftware | 7.5 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 use weak encryption for packet-level security and… |
| CVE-2023-28508 | UN Unidata Rocketsoftware | 8.8 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based overflow vulnerability,… |
| CVE-2023-28507 | UN Universe Rocketsoftware | 9.8 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a memory-exhaustion issue, where a… |
| CVE-2023-28506 | UN Unidata Rocketsoftware | 8.8 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow, where a… |
| CVE-2023-28505 | UN Unidata Rocketsoftware | 8.8 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow in an API function,… |
| CVE-2023-28504 | UN Universe Rocketsoftware | 9.8 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow that can… |
| CVE-2023-28503 | UN Unidata Rocketsoftware | 9.8 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass… |
| CVE-2023-28502 | UN Unidata Rocketsoftware | 9.8 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the… |
| CVE-2023-28501 | UN Universe Rocketsoftware | 9.8 | Mar 29 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the… |
| CVE-2022-25027 | TE Trufusion Enterprise Rocketsoftware | 7.5 | Jan 12 | The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restricted pages by validating the user's… |
| CVE-2022-25026 | TE Trufusion Enterprise Rocketsoftware | 7.5 | Jan 12 | A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP… |
| CVE-2022-36431 | TR Trufusion Rocketsoftware | 9.8 | Dec 1 | An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file |
| CVE-2021-45026 | AG Ags-zena Rocketsoftware | 6.1 | Jun 17 | ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2021-45025 | AG Ags-zena Rocketsoftware | 7.5 | Jun 17 | ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of Sensitive Information in a Cookie |
| CVE-2021-45024 | AG Ags-zena Rocketsoftware | 9.8 | Jun 17 | ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity (XXE) |
| CVE-2014-3914 | RS Rocket Servergraph Rocketsoftware | – | Aug 7 | Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a |
| CVE-2014-3915 | RS Rocket Servergraph Rocketsoftware | – | Jun 11 | The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a (1) auth, (2)… |