Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Parallels Component: Remote Application Server Clear all filters
TI-2025-00332 CVE-2025-0413 · GHSA-wwfq-cq3f-8qx7

Link following in Parallels Desktop

Priority LOW 36

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00415 Published 2025-02-04 No fix listed CWE-59
TI-2023-24642 CVE-2023-45894 · GHSA-756q-cg5p-5457

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment…

Priority MEDIUM 45

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout tech…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01205 Published 2023-12-14 No fix listed
TI-2020-07200 CVE-2020-8968 · GHSA-m97r-wj82-82xw

Parallels Remote Application Server credentials management errors

Priority LOW 31

Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00281 Published 2021-12-17 No fix listed CWE-255
TI-2020-18170 CVE-2020-35710 · GHSA-35ch-vqm2-376r

Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an…

Priority LOW 27

Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides this address to the attacker's client fo…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01695 Published 2020-12-25 No fix listed CWE-200