Vulnerabilities > Parallels
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-07-18 | CVE-2022-34900 | Uncontrolled Search Path Element vulnerability in Parallels Access 6.5.4(39313) This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. | 7.8 |
| 2022-07-18 | CVE-2022-34901 | Unspecified vulnerability in Parallels Access 6.5.4(39316) This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. | 7.8 |
| 2022-07-18 | CVE-2022-34902 | Unspecified vulnerability in Parallels Access 6.5.4(39316) This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. | 7.8 |
| 2022-07-15 | CVE-2021-34986 | Unspecified vulnerability in Parallels Desktop 16.5.0 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (49183). | 7.8 |
| 2022-07-15 | CVE-2021-34987 | Unspecified vulnerability in Parallels Desktop 16.5.1 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (49187). | 8.2 |
| 2022-05-16 | CVE-2022-30777 | Cross-site Scripting vulnerability in Parallels H-Sphere 3.6.2 Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter. | 6.1 |
| 2022-01-25 | CVE-2021-34867 | Unspecified vulnerability in Parallels 16.1.349160 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. | 8.2 |
| 2022-01-25 | CVE-2021-34868 | Unspecified vulnerability in Parallels 16.1.349160 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. | 8.8 |
| 2022-01-25 | CVE-2021-34869 | Unspecified vulnerability in Parallels 16.1.349160 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. | 8.8 |
| 2021-12-17 | CVE-2020-8968 | Unspecified vulnerability in Parallels Remote Application Server 15.5/17.0 Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. | 7.1 |