Vulnerabilities > RWS > Worldserver

DATE CVE VULNERABILITY TITLE RISK
2023-12-25 CVE-2022-34267 Improper Authentication vulnerability in RWS Worldserver
An issue was discovered in RWS WorldServer before 11.7.3.
network
low complexity
rws CWE-287
critical
9.8
2023-12-25 CVE-2022-34268 Deserialization of Untrusted Data vulnerability in RWS Worldserver
An issue was discovered in RWS WorldServer before 11.7.3.
network
low complexity
rws CWE-502
critical
9.8
2023-08-01 CVE-2023-38357 Insufficient Entropy vulnerability in RWS Worldserver 11.7.3
Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessions.
network
low complexity
rws CWE-331
5.3