Remote Application Server
Vendor:
First CVE: Feb 28, 2018 · Active for 8 years
7
Total CVEs
More Total CVEs than 83% of tracked products
1.2
Avg CVEs / Year
Higher CVE frequency than 55% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 69% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Remote Application Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 28, 2018
8 years ago
Most Recent CVE
Feb 5, 2025
534 days ago
CVE Severity & Scoring
Remote Application Server7 CVEs
14%
57%
29%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (28.6%)
Network5 (71.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (85.7%)
High1 (14.3%)
Unknown0 (0.0%)
User Interaction
None7 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (42.9%)
High0 (0.0%)
None4 (57.1%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-45894CRITICAL The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code ex | Dec 14, 2023 | 10.0 | 27 | NO | NO |
CVE-2020-15860CRITICAL Parallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code execution. It allows an authenticated user to execute any application in the backend | Jul 24, 2020 | 9.9 | 27 | NO | NO |
CVE-2022-40870HIGH The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a | Nov 23, 2022 | 8.1 | 26 | NO | NO |
CVE-2020-8968HIGH Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parall | Dec 17, 2021 | 7.1 | 24 | NO | NO |
CVE-2017-9447HIGH In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource un | Feb 28, 2018 | 7.5 | 24 | NO | NO |
CVE-2025-0413HIGH Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability.
This vulnerability allows local attackers to escalate privileges on affected ins | Feb 5, 2025 | 7.8 | 22 | NO | NO |
CVE-2020-35710MEDIUM Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides | Dec 25, 2020 | 5.3 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Remote Application Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 18.0 | 2 | 6.7 | 1.4% | 0 | 0 |
| 17.1.1 | 1 | 9.9 | 4.0% | 0 | 0 |
| 15.5 | 1 | 7.5 | 2.0% | 0 | 0 |