How many parallels remote application server CVEs are in CISA KEV?

None of parallels remote application server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of parallels remote application server are affected?

8 distinct parallels remote application server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in parallels remote application server CVEs?

parallels remote application server's CVEs most often map to these CWE weakness types: CWE-116 (Improper Encoding or Escaping of Output), CWE-255, CWE-59 (Improper Link Resolution Before File Access ('Link Following')).

What is the average severity of parallels remote application server CVEs?

The average CVSS base score across parallels remote application server's scored CVEs is 8.0.

RadicalNotion.AI

Log in Start free

parallels

7 CVEs

parallels remote application server Vulnerabilities

Name: parallels remote application server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for remote application server by parallels.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

8.0

Avg CVSS

2018–2025

Last updated February 4, 2025

Overview

parallels remote application server has 7 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting parallels remote application server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of parallels remote application server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High4

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of parallels remote application server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of parallels remote application server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every parallels remote application server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

18.0 <= v <= 18.02 CVEs
< 19.2.239751 CVE
< 19.4.3.2-252281 CVE
15.5 <= v <= 15.51 CVE
15.5 <= v <= 17.01 CVE
17.1.1 <= v <= 17.1.11 CVE

Fixed in

19.2.239751 CVE
19.4.3.2-252281 CVE

Find a version

7 CVEs

Sort

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability
CVE-2025-0413
Patch
CWE-59
High · CVSS 7.8
EPSS 0.4% (35th pct)2025-02-04
Critical vulnerability · 2023-12-14
CVE-2023-45894
Patch
Critical · CVSS 10.0
EPSS 1.2% (66th pct)2023-12-14
High vulnerability · 2022-11-22
CVE-2022-40870
Public exploit
CWE-116
High · CVSS 8.1
EPSS 1.9% (79th pct)2022-11-22
High vulnerability · 2021-12-17
CVE-2020-8968
Patch
CWE-255
High · CVSS 7.1
EPSS 0.3% (19th pct)2021-12-17
Medium vulnerability · 2020-12-25
CVE-2020-35710
Medium · CVSS 5.3
EPSS 1.7% (75th pct)2020-12-25
Critical vulnerability · 2020-07-24
CVE-2020-15860
Critical · CVSS 9.9
EPSS 4.0% (90th pct)2020-07-24
High vulnerability · 2018-02-28
CVE-2017-9447
Public exploit
High · CVSS 7.5
EPSS 2.0% (79th pct)2018-02-28

Common weakness types

The CWE weakness categories most often found in parallels remote application server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many parallels remote application server CVEs were published each year.

2018

1

2020

2

2021

1

2022

1

2023

1

2025

1

Other parallels products

Browse vulnerabilities for other products by parallels.

parallels desktop76 CVEs Desktop69 CVEs parallels plesk panel42 CVEs parallels plesk small business panel16 CVEs parallels5 CVEs Access4 CVEs parallels access4 CVEs Parallels Desktop for Mac4 CVEs

All parallels vulnerabilities

Frequently asked questions

Common questions about parallels remote application server vulnerabilities.

How many CVEs does parallels remote application server have?: parallels remote application server has 7 published CVE records since 2018.
How many parallels remote application server CVEs are in CISA KEV?: None of parallels remote application server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for parallels remote application server vulnerabilities?: Yes — 2 of parallels remote application server's CVEs have a known public exploit.
Which versions of parallels remote application server are affected?: 8 distinct parallels remote application server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in parallels remote application server CVEs?: parallels remote application server's CVEs most often map to these CWE weakness types: CWE-116 (Improper Encoding or Escaping of Output), CWE-255, CWE-59 (Improper Link Resolution Before File Access ('Link Following')).
How many critical parallels remote application server vulnerabilities are there?: parallels remote application server has 2 critical and 4 high-severity CVEs.
What is the average severity of parallels remote application server CVEs?: The average CVSS base score across parallels remote application server's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track parallels remote application server vulnerabilities

Monitor new parallels remote application server vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing