İçeriğe atla
Noroxi

rocketsoftware kayıtları

rocketsoftware üreticisine ait 24 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %12,5
Pre-auth RCE
8
Düzeltme kaydı olan
%41,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

24 kayıt
  • CVE-2014-3914
    62Bu hafta

    Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to

    KritikCVSS 10,0SilahlaştırılmışEPSS %73

    rocketsoftware · rocket servergraph7 Ağu 2014

  • CVE-2023-28503
    58Planlayın

    Authentication bypass in UniRPC's udadmin service

    KritikCVSS 9,8SilahlaştırılmışEPSS %62

    rocketsoftware · unidata29 Mar 2023

  • CVE-2023-28502
    57Planlayın

    Stack buffer overflow in UniRPC's udadmin_server service

    KritikCVSS 9,8SilahlaştırılmışEPSS %61

    rocketsoftware · unidata29 Mar 2023

  • CVE-2014-3915
    41Planlayın

    The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary co

    KritikCVSS 10,0İstismar yokEPSS %3

    rocketsoftware · rocket servergraph11 Haz 2014

  • CVE-2023-28504
    39İzleyin

    Stack buffer overflow in UniRPC library function

    KritikCVSS 9,8İstismar yokEPSS %1

    rocketsoftware · unidata29 Mar 2023

  • CVE-2023-28501
    39İzleyin

    Heap buffer overflow in unirpcd

    KritikCVSS 9,8İstismar yokEPSS %1

    rocketsoftware · unidata29 Mar 2023

  • CVE-2022-36431
    39İzleyin

    An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary c

    KritikCVSS 9,8İstismar yokEPSS %1

    rocketsoftware · trufusion1 Ara 2022

  • CVE-2021-45024
    39İzleyin

    ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity (

    KritikCVSS 9,8İstismar yokEPSS %1

    rocketsoftware · ags-zena17 Haz 2022

  • CVE-2023-28507
    39İzleyin

    Memory exhaustion in LZ4 decompression in UniRPC daemon

    KritikCVSS 9,8İstismar yokEPSS %1

    rocketsoftware · unidata29 Mar 2023

  • CVE-2025-27224
    39İzleyin

    TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files.

    KritikCVSS 9,8İstismar yokEPSS %1

    rocketsoftware · trufusion enterprise27 Eki 2025

  • CVE-2022-25026
    37İzleyin

    A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on th

    YüksekCVSS 7,5İstismar yokEPSS %24

    rocketsoftware · trufusion enterprise12 Oca 2023

  • CVE-2025-59793
    37İzleyin

    Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able

    KritikCVSS 9,4İstismar yokEPSS %1

    rocketsoftware · trufusion enterprise17 Şub 2026

  • CVE-2025-27225
    36İzleyin

    TRUfusion Enterprise through 7.10.4.0 exposes the /trufusionPortal/jsp/internal_admin_contact_login.jsp endpoint to unauthenticated users.

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    rocketsoftware · trufusion enterprise27 Eki 2025

  • CVE-2025-27222
    35İzleyin

    TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files.

    YüksekCVSS 8,6Kavram kanıtıEPSS %2

    rocketsoftware · trufusion enterprise27 Eki 2025

  • CVE-2023-28506
    35İzleyin

    Stack buffer overflow in UniRPC service

    YüksekCVSS 8,8İstismar yokEPSS %1

    rocketsoftware · unidata29 Mar 2023

  • CVE-2023-28508
    35İzleyin

    Heap corruption in UniRPC service

    YüksekCVSS 8,8İstismar yokEPSS %1

    rocketsoftware · unidata29 Mar 2023

  • CVE-2023-28505
    35İzleyin

    Buffer overflow in UniRPC library function

    YüksekCVSS 8,8İstismar yokEPSS %1

    rocketsoftware · unidata29 Mar 2023

  • CVE-2025-27223
    31İzleyin

    TRUfusion Enterprise through 7.10.4.0 exposes the encrypted COOKIEID as an authentication mechanism for some endpoints such as /trufusionPor

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    rocketsoftware · trufusion enterprise27 Eki 2025

  • CVE-2025-32355
    31İzleyin

    Rocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections.

    YüksekCVSS 7,9Kavram kanıtıEPSS %1

    rocketsoftware · trufusion enterprise17 Şub 2026

  • CVE-2022-25027
    30İzleyin

    The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restric

    YüksekCVSS 7,5İstismar yokEPSS %1

    rocketsoftware · trufusion enterprise12 Oca 2023

  • CVE-2021-45025
    30İzleyin

    ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of

    YüksekCVSS 7,5İstismar yokEPSS %1

    rocketsoftware · ags-zena17 Haz 2022

  • CVE-2023-28509
    30İzleyin

    Weak encryption in UniRPC protocol

    YüksekCVSS 7,5İstismar yokEPSS %0

    rocketsoftware · unidata29 Mar 2023

  • CVE-2024-45955
    29İzleyin

    Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter.

    YüksekCVSS 7,3İstismar yokEPSS %0

    rocketsoftware · zena30 Tem 2025

  • CVE-2021-45026
    24İzleyin

    ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    rocketsoftware · ags-zena17 Haz 2022