rws records
10 published records for vendor rws.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-287 Improper Authentication1
- CWE-331 Insufficient Entropy1
- CWE-284 Improper Access Control1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
52Plan | CVE-2022-34267Proof of concept | An issue was discovered in RWS WorldServer before 11.7.3.rws · worldserver · CWE-287 | Critical9.8 | — | 42.1% | Dec 25, 2023 |
39Monitor | CVE-2022-34268No exploit | An issue was discovered in RWS WorldServer before 11.7.3.rws · worldserver · CWE-502 | Critical9.8 | — | 1.4% | Dec 25, 2023 |
39Monitor | CVE-2022-34270No exploit | An issue was discovered in RWS WorldServer before 11.7.3.rws · worldserver · CWE-284 | Critical9.8 | — | 0.8% | Feb 28, 2024 |
36Monitor | CVE-2022-34269No exploit | An issue was discovered in RWS WorldServer before 11.7.3.rws · worldserver · CWE-918 | High8.8 | — | 1.7% | Feb 28, 2024 |
30Monitor | CVE-2005-4548No exploit | SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execute arbitrary SQL commarws · statistics counter | High7.5 | — | 1.2% | Dec 28, 2005 |
26Monitor | CVE-2024-50848Proof of concept | An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to accerws · worldserver · CWE-611 | Medium6.5 | — | 1.2% | Nov 18, 2024 |
24Monitor | CVE-2024-43024No exploit | Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary wrws · multitrans · CWE-79 | Medium6.1 | — | 0.3% | Sep 18, 2024 |
24Monitor | CVE-2024-43025No exploit | An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a rws · multitrans · CWE-79 | Medium6.1 | — | 0.3% | Sep 18, 2024 |
23Monitor | CVE-2023-38357Proof of concept | Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessiorws · worldserver · CWE-331 | Medium5.3 | — | 5.3% | Aug 1, 2023 |
19Monitor | CVE-2024-50849Proof of concept | A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attackerrws · worldserver · CWE-79 | Medium4.8 | — | 0.4% | Nov 18, 2024 |
- CVE-2022-3426752Plan
An issue was discovered in RWS WorldServer before 11.7.3.
CriticalCVSS 9.8Proof of conceptEPSS 42%rws · worldserverDec 25, 2023
- CVE-2022-3426839Monitor
An issue was discovered in RWS WorldServer before 11.7.3.
CriticalCVSS 9.8No exploitEPSS 1%rws · worldserverDec 25, 2023
- CVE-2022-3427039Monitor
An issue was discovered in RWS WorldServer before 11.7.3.
CriticalCVSS 9.8No exploitEPSS 0%rws · worldserverFeb 28, 2024
- CVE-2022-3426936Monitor
An issue was discovered in RWS WorldServer before 11.7.3.
HighCVSS 8.8No exploitEPSS 1%rws · worldserverFeb 28, 2024
- CVE-2005-454830Monitor
SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execute arbitrary SQL comma
HighCVSS 7.5No exploitEPSS 1%rws · statistics counterDec 28, 2005
- CVE-2024-5084826Monitor
An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to acce
MediumCVSS 6.5Proof of conceptEPSS 1%rws · worldserverNov 18, 2024
- CVE-2024-4302424Monitor
Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary w
MediumCVSS 6.1No exploitEPSS 0%rws · multitransSep 18, 2024
- CVE-2024-4302524Monitor
An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a
MediumCVSS 6.1No exploitEPSS 0%rws · multitransSep 18, 2024
- CVE-2023-3835723Monitor
Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized access to user sessio
MediumCVSS 5.3Proof of conceptEPSS 5%rws · worldserverAug 1, 2023
- CVE-2024-5084919Monitor
A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attacker
MediumCVSS 4.8Proof of conceptEPSS 0%rws · worldserverNov 18, 2024