Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-25	CVE-2020-35710	Information Exposure vulnerability in Parallels Remote Application Server 18.0 Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides this address to the attacker's client for use as a "host" value. network low complexity parallels CWE-200	5.0
2018-02-28	CVE-2017-9447	Path Traversal vulnerability in Parallels Remote Application Server 15.5 In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the "RASHTML5Gateway" directory. network low complexity parallels CWE-22	5.0