Remote application server

This hub aggregates every CVE we track for Remote application server, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Remote application server.

• CVE-2025-0413Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability7.8Feb 4, 2025
• CVE-2023-45894The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via stand...10.0Dec 14, 2023
• CVE-2022-40870The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload i...8.1Nov 22, 2022
• CVE-2020-8968Parallels Remote Application Server credentials management errors7.1Dec 17, 2021
• CVE-2020-35710Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides this address to t...5.3Dec 25, 2020
• CVE-2020-15860Parallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code execution. It allows an authenticated user to execute any application in the backend operating system...9.9Jul 24, 2020
• CVE-2017-9447In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the "RASHTML5...7.5Feb 28, 2018