Sparkdevnetwork Rock Rms — known CVE vulnerabilities

Every CVE whose affected-product data names Sparkdevnetwork Rock Rms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-18641 — CVSS 9.8 (critical): Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.
• CVE-2019-18642 — CVSS 9.8 (critical): Rock RMS version before 8.6 is vulnerable to account takeover by tampering with the user ID parameter in the profile update feature. The…
• CVE-2019-18643 — CVSS 9.8 (critical): Rock RMS versions before 8.10 and versions 9.0 through 9.3 fails to properly validate files uploaded in the application. The only…