Rws

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 10
    Known Exploited: 0
    3
    Critical Level Threats
    2
    High Level Threats
    5
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-50849

    A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attacker to execute arbitrary JavaScript code.

    Last Modified: Oct 20, 2025
    Published: Nov 18, 2024

    CVE-2024-50848

    An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file.

    Last Modified: Oct 20, 2025
    Published: Nov 18, 2024

    CVE-2024-43025

    An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail.

    Last Modified: Mar 25, 2025
    Published: Sep 18, 2024

    CVE-2024-43024

    Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary web scripts or HTML via a crafted payload.

    Last Modified: Mar 25, 2025
    Published: Sep 18, 2024

    CVE-2022-34268

    An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host.

    Last Modified: Nov 21, 2024
    Published: Dec 25, 2023
    Items Per Page