Parallels Sårbarheter

Tidslinje

Typ

Produkt

Parallels Desktop44
Parallels Plesk Panel39
Parallels Plesk Small Business Panel16
Parallels Plesk10
Parallels Remote Application Server5

Åtgärd

Official Fix23
Temporary Fix0
Workaround0
Unavailable50
Not Defined56

Utnyttjbarhet

High14
Functional0
Proof-of-Concept7
Unproven38
Not Defined70

Åtkomstvektor

Not Defined0
Physical0
Local39
Adjacent4
Network86

Autentisering

Not Defined0
High11
Low47
None71

Användarinteraktion

Not Defined0
Required15
None114

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤45
≤512
≤637
≤715
≤826
≤911
≤1019

CVSSv3 Temp

≤10
≤20
≤34
≤46
≤532
≤620
≤712
≤825
≤928
≤102

VulDB

≤10
≤20
≤34
≤47
≤512
≤639
≤715
≤826
≤97
≤1019

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤73
≤89
≤98
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤812
≤92
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k17
<2k36
<5k75
<10k0
<25k0
<50k1
<100k0
≥100k0

Utnyttja idag

<1k119
<2k8
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (13): Access (3), Access Agent (1), Confixx (1), Desktop (44), H-Sphere (3), Parallels Desktop (4), Plesk (10), Plesk Panel (39), Plesk Small Business Panel (16), RAS (1), Remote Application Server (5), Virtuozzo (1), Virtuozzo Containers (1)

Link to Vendor Website: https://www.parallels.com/

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
19/12/20237.87.5Parallels Desktop svag autentiseringOkändNot DefinedOfficial Fix0.000000.00CVE-2023-50228
19/12/20237.87.5Parallels Desktop privilegier eskaleringOkändNot DefinedOfficial Fix0.000000.04CVE-2023-50226
19/12/20237.57.2Parallels Desktop virtio-gpu Virtual Device minneskorruptionOkändNot DefinedOfficial Fix0.000000.04CVE-2023-50227
15/12/20235.55.3Parallels RAS Remote Application Server privilegier eskaleringOkändNot DefinedOfficial Fix0.002100.00CVE-2023-45894
30/03/20235.35.1Parallels Desktop Toolgate tävlingsvillkorOkändNot DefinedOfficial Fix0.000000.00CVE-2023-27327
30/03/20235.35.1Parallels Desktop Service Local Privilege EscalationOkändNot DefinedOfficial Fix0.000000.00CVE-2023-27322
30/03/20235.35.1Parallels Desktop Updater tävlingsvillkorOkändNot DefinedOfficial Fix0.000000.06CVE-2023-27323
30/03/20235.55.3Parallels Desktop Updater Privilege EscalationOkändNot DefinedOfficial Fix0.000000.00CVE-2023-27324
30/03/20235.55.3Parallels Desktop Updater Privilege EscalationOkändNot DefinedOfficial Fix0.000000.00CVE-2023-27325
30/03/20235.35.1Parallels Desktop Toolgate privilegier eskaleringOkändNot DefinedOfficial Fix0.000000.00CVE-2023-27328
30/03/20236.76.4Parallels Desktop Toolgate kataloggenomgångOkändNot DefinedOfficial Fix0.000000.00CVE-2023-27326
23/11/20227.27.1Parallels Remote Application Server Web Client privilegier eskaleringApplication Server SoftwareNot DefinedNot Defined0.003240.02CVE-2022-40870
19/07/20228.18.1Parallels Access Desktop Control Agent service privilegier eskaleringOkändNot DefinedNot Defined0.000450.02CVE-2022-34902
19/07/20227.97.9Parallels Desktop ACPI Virtual Device informationsgivningOkändNot DefinedNot Defined0.000450.00CVE-2022-34889
19/07/20228.18.1Parallels Access privilegier eskaleringOkändNot DefinedNot Defined0.000450.00CVE-2022-34901
19/07/20227.47.4Parallels Access Symbolic Links tävlingsvillkorOkändNot DefinedNot Defined0.000450.00CVE-2022-34899
19/07/20228.18.1Parallels Desktop privilegier eskaleringOkändNot DefinedNot Defined0.000450.00CVE-2022-34891
19/07/20228.18.1Parallels Desktop tävlingsvillkorOkändNot DefinedNot Defined0.000450.00CVE-2022-34892
19/07/20227.57.4Parallels Desktop Tools minneskorruptionOkändNot DefinedOfficial Fix0.000450.00CVE-2022-34890
19/07/20228.18.1Parallels Access Agent Dispatcher Service privilegier eskaleringOkändNot DefinedNot Defined0.000450.03CVE-2022-34900
16/07/20227.97.9Parallels Desktop HDAudio Virtual Device minneskorruptionOkändNot DefinedNot Defined0.000450.00CVE-2021-34987
16/07/20227.07.0Parallels Desktop Symbolic Links tävlingsvillkorOkändNot DefinedNot Defined0.000450.00CVE-2021-34986
17/05/20223.53.5Parallels H-Sphere index_en.php cross site scriptingOkändNot DefinedNot Defined0.000870.00CVE-2022-30777
25/01/20227.67.6Parallels Desktop förnekande av tjänstenOkändNot DefinedNot Defined0.000450.00CVE-2021-34869
25/01/20227.67.6Parallels Desktop Toolgate förnekande av tjänstenOkändNot DefinedNot Defined0.000450.00CVE-2021-34868

104 fler poster visas inte

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!