Flexera
21 CVEs across 10 Flexera products. Browse Flexera vulnerabilities, severities, and proof-of-concept exploits.
Flexera products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-4027 | | 2026-06-19 | A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficie… | |
CVE-2026-4026 | | 2026-06-19 | A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings… | |
CVE-2021-41528 | | 2025-02-07 | An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-2021-12-29 release can potentially be exp… | |
CVE-2021-41527 | | 2025-02-07 | An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to bypass the 2FA… | |
CVE-2024-2658 | | 2025-01-30 | A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent… | |
CVE-2023-29081 | Medium | 5.5 | 2024-01-26 | A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users… |
CVE-2021-41526 | High | 7.8 | 2023-03-29 | A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when… |
CVE-2019-8963 | High | 7.5 | 2023-03-29 | A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based… |
CVE-2017-6894 | High | 7.8 | 2023-03-29 | A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventor… |
CVE-2021-41525 | Medium | 5.5 | 2021-09-21 | An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon… |
CVE-2020-12083 | Critical | 9.9 | 2021-09-17 | An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64). |
CVE-2020-12082 | Medium | 5.4 | 2021-09-17 | A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64). |
CVE-2020-12080 | High | 7.5 | 2021-09-17 | A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause… |
CVE-2020-12081 | High | 7.5 | 2020-07-31 | An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system fil… |
CVE-2019-8961 | High | 7.5 | 2020-04-21 | A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Because the message reading functio… |
CVE-2019-8960 | High | 7.5 | 2020-04-21 | A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading functio… |
CVE-2018-20034 | High | 7.5 | 2019-03-21 | A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier… |
CVE-2018-20032 | High | 7.5 | 2019-03-21 | A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a… |
CVE-2018-20031 | High | 7.5 | 2019-03-21 | A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier… |
CVE-2018-20033 | Critical | 9.8 | 2019-02-25 | A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to… |
CVE-2016-2542 | High | 7.8 | 2016-02-24 | Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current worki… |