7.5
CVSSv3

CVE-2020-7213

Published: 21/01/2020 Updated: 29/01/2020
CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9
CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6
VMScore: 676
Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Summary

Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks. Users of out-of-date versions are presented with a pop-up window for a parallels_updates.xml file on the update.parallels.com web site.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

parallels parallels 13