Skip to content
Noroxi

rocketsoftware records

24 published records for vendor rocketsoftware.

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 12.5%
Pre-auth RCE
8
With a fix record
41.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 25
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2014-3914
    62This week

    Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to

    CriticalCVSS 10.0WeaponizedEPSS 73%

    rocketsoftware · rocket servergraphAug 7, 2014

  • CVE-2023-28503
    58Plan

    Authentication bypass in UniRPC's udadmin service

    CriticalCVSS 9.8WeaponizedEPSS 62%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2023-28502
    57Plan

    Stack buffer overflow in UniRPC's udadmin_server service

    CriticalCVSS 9.8WeaponizedEPSS 61%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2014-3915
    41Plan

    The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary co

    CriticalCVSS 10.0No exploitEPSS 3%

    rocketsoftware · rocket servergraphJun 11, 2014

  • CVE-2023-28504
    39Monitor

    Stack buffer overflow in UniRPC library function

    CriticalCVSS 9.8No exploitEPSS 1%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2023-28501
    39Monitor

    Heap buffer overflow in unirpcd

    CriticalCVSS 9.8No exploitEPSS 1%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2022-36431
    39Monitor

    An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary c

    CriticalCVSS 9.8No exploitEPSS 1%

    rocketsoftware · trufusionDec 1, 2022

  • CVE-2021-45024
    39Monitor

    ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity (

    CriticalCVSS 9.8No exploitEPSS 1%

    rocketsoftware · ags-zenaJun 17, 2022

  • CVE-2023-28507
    39Monitor

    Memory exhaustion in LZ4 decompression in UniRPC daemon

    CriticalCVSS 9.8No exploitEPSS 1%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2025-27224
    39Monitor

    TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files.

    CriticalCVSS 9.8No exploitEPSS 1%

    rocketsoftware · trufusion enterpriseOct 27, 2025

  • CVE-2022-25026
    37Monitor

    A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on th

    HighCVSS 7.5No exploitEPSS 24%

    rocketsoftware · trufusion enterpriseJan 12, 2023

  • CVE-2025-59793
    37Monitor

    Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able

    CriticalCVSS 9.4No exploitEPSS 1%

    rocketsoftware · trufusion enterpriseFeb 17, 2026

  • CVE-2025-27225
    36Monitor

    TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unauthenticated users.

    HighCVSS 7.5Proof of conceptEPSS 18%

    rocketsoftware · trufusion enterpriseOct 27, 2025

  • CVE-2025-27222
    35Monitor

    TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files.

    HighCVSS 8.6Proof of conceptEPSS 2%

    rocketsoftware · trufusion enterpriseOct 27, 2025

  • CVE-2023-28506
    35Monitor

    Stack buffer overflow in UniRPC service

    HighCVSS 8.8No exploitEPSS 1%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2023-28508
    35Monitor

    Heap corruption in UniRPC service

    HighCVSS 8.8No exploitEPSS 1%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2023-28505
    35Monitor

    Buffer overflow in UniRPC library function

    HighCVSS 8.8No exploitEPSS 1%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2025-27223
    31Monitor

    TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints such as /trufusionPor

    HighCVSS 7.5Proof of conceptEPSS 2%

    rocketsoftware · trufusion enterpriseOct 27, 2025

  • CVE-2025-32355
    31Monitor

    Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections.

    HighCVSS 7.9Proof of conceptEPSS 1%

    rocketsoftware · trufusion enterpriseFeb 17, 2026

  • CVE-2022-25027
    30Monitor

    The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restric

    HighCVSS 7.5No exploitEPSS 1%

    rocketsoftware · trufusion enterpriseJan 12, 2023

  • CVE-2021-45025
    30Monitor

    ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of

    HighCVSS 7.5No exploitEPSS 1%

    rocketsoftware · ags-zenaJun 17, 2022

  • CVE-2023-28509
    30Monitor

    Weak encryption in UniRPC protocol

    HighCVSS 7.5No exploitEPSS 0%

    rocketsoftware · unidataMar 29, 2023

  • CVE-2024-45955
    29Monitor

    Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter.

    HighCVSS 7.3No exploitEPSS 0%

    rocketsoftware · zenaJul 30, 2025

  • CVE-2021-45026
    24Monitor

    ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).

    MediumCVSS 6.1Proof of conceptEPSS 1%

    rocketsoftware · ags-zenaJun 17, 2022