Remote Application Server vulnerabilities

2 known vulnerabilities in Remote Application Server from Parallels. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Desktop: Improper Link Resolution Before File Access

  CVE-2025-0413Feb 5, 2025Parallels

  Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to exe

• 8.1 High severity

  Remote Application Server: Improper Encoding or Escaping of Output

  CVE-2022-40870Nov 23, 2022ParallelsEPSS 2.11%

  The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a crafted payload injected into the Host header.