TI-2022-15180 CVE-2022-34268 · GHSA-q565-26vc-vpx8
An issue was discovered in RWS WorldServer before 11.7.3.
Priority HIGH 82
An issue was discovered in RWS WorldServer before 11.7.3.
Rws
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Rws records in CISA KEVNo Rws vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records
TI-2022-15181 CVE-2022-34269 · GHSA-9426-vxhj-rxm5
An issue was discovered in RWS WorldServer before 11.7.3.
Priority HIGH 73
An issue was discovered in RWS WorldServer before 11.7.3.
TI-2022-15179 CVE-2022-34267 · GHSA-84m5-wq3j-47c4
An issue was discovered in RWS WorldServer before 11.7.3.
Priority HIGH 70
An issue was discovered in RWS WorldServer before 11.7.3.
TI-2023-19748 CVE-2023-38357 · GHSA-53pg-hp8w-g7j6
Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be…
Priority MEDIUM 63
Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions.
TI-2022-15182 CVE-2022-34270 · GHSA-j2jm-v4rj-jq5r
An issue was discovered in RWS WorldServer before 11.7.3.
Priority MEDIUM 45
An issue was discovered in RWS WorldServer before 11.7.3.
TI-2005-04281 CVE-2005-4548 · GHSA-q299-234g-2fcj
SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1…
Priority LOW 35
SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
TI-2024-34141 CVE-2024-50848 · GHSA-3mjq-gr7r-h6x3
An XML External Entity (XXE) vulnerability in the Import object and Translation Memory…
Priority LOW 31
An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted…
TI-2024-28724 CVE-2024-43025 · GHSA-g2w3-jpfv-qffv
An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows…
Priority LOW 27
An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail.
TI-2024-28723 CVE-2024-43024 · GHSA-2wh6-wp88-phq8
Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2…
Priority LOW 27
Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary web scripts or HTML via a crafted payload.
TI-2024-34142 CVE-2024-50849 · GHSA-6pq4-p6m9-6r69
A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of…
Priority LOW 23
A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attacker to execute arbitrary JavaScript code.