rathena
Security Risk Profile
68
/100
highSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 12, 2022 to present
6
Total CVEs
5
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
68/100
high
Severity Distribution
Critical
3High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
2
2
XSS
2
3
Use After Free
1
4
SQL Injection
1
5
Infoleak
1
Most Affected Products
1. rAthena rAthena7
2. rAthena FluxCP2
3. rAthena map-server1
4. FluxCP FluxCP1
Recent Vulnerabilities
See more →CVE-2025-62170
CVSS 7.5high
rAthena map-server use-after-free vulnerability in RODEX
10/13/2025
CVE-2025-58750
CVSS 9.1critical
rAthena missing bound check in chclif_parse_moveCharSlot
9/9/2025
CVE-2025-58448
CVSS 9.8critical
rAthena has SQL Injection in PartyBooking component via `WorldName` parameter.
9/9/2025
CVE-2025-58447
CVSS 9.8critical
rAthena has heap-based buffer overflow in login server
9/9/2025
CVE-2024-45799
CVSS 7.3high
Javascript Injection in Vending Info/Buyers Info Module in FluxCP
9/16/2024🔧 No Patch
CVE-2022-4421
CVSS 6.1medium
rAthena FluxCP Service Desk Image URL view.php cross site scripting
12/12/2022
Monitor rathena in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.