Parallels

Records159All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high71CVSS 7.0–8.9

Exploited now

Parallels records in CISA KEV

No Parallels vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Parallels Desktop 74 records HIGH Parallels Plesk Panel 42 records MEDIUM Parallels Plesk Small Business Panel 16 records MEDIUM Remote Application Server 7 records HIGH Parallels 5 records LOW Parallels Access 4 records LOW H-sphere 3 records LOW Confixx 1 record MEDIUM

Records

3 records in H-sphere · all components

TI-2022-12908 CVE-2022-30777 · GHSA-27qc-3h99-8rcj

Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.

LOW 32

Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02296 Published 2022-05-16 No fix listed CWE-79

TI-2012-04230 CVE-2012-5004 · GHSA-m422-vwp4-mfgf

Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that (1) add group plans via admin/group_plans.html…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00923 Published 2012-09-19 No fix listed CWE-352

TI-2008-06155 CVE-2008-6465 · GHSA-rq9g-wqrp-v34r

Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05114 Published 2009-03-13 No fix listed CWE-79

Open these records in search →

Critical	21
High	71
Medium	65
Low	2
No CVSS	0