Known vulnerabilities in Rock RMS

Vendor: Spark Development Network
Software: Rock RMS
Software CPE: cpe:2.3:a:spark_development_network:rock_rms:*:*:*:*:*:*:*:*
Website: https://sparkdevnetwork.org/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Rock RMS Rock RMS is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49260 - Unrestricted Upload of File with Dangerous Type
CVE-2020-18643		 CWE-434 High
No
No
 8.10, 9.4 05.01.2021 SB2021010503
#VU49259 - Security Features
CVE-2020-18642		 CWE-254 High
No
No
 8.10, 9.4 05.01.2021 SB2021010503