Reprisesoftware Reprise_license_manager
19 CVEs affecting Reprisesoftware Reprise_license_manager. Latest disclosed: 2025-03-03. Critical: 1, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-44152 | Critical | 9.8 | 2021-12-13 | An issue was discovered in Reprise RLM 14.2. Because /goform/change_password_process does not verify authentication or authorization, an unauthenticated user c… |
CVE-2023-43183 | High | 8.8 | 2024-02-03 | Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change the password of an a… |
CVE-2018-15573 | High | 8.8 | 2018-08-20 | An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as lo… |
CVE-2021-37500 | High | 8.1 | 2023-01-20 | Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficie… |
CVE-2018-5716 | High | 8.1 | 2018-02-21 | An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can… |
CVE-2023-44031 | High | 7.5 | 2024-02-03 | Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure… |
CVE-2021-44151 | High | 7.5 | 2021-12-13 | An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character… |
CVE-2021-44154 | High | 7.2 | 2021-12-13 | An issue was discovered in Reprise RLM 14.2. By using an admin account, an attacker can write a payload to /goform/edit_opt, which will then be triggered when… |
CVE-2021-44153 | High | 7.2 | 2021-12-13 | An issue was discovered in Reprise RLM 14.2. When editing the license file, it is possible for an admin user to enable an option to run arbitrary executables… |
CVE-2021-37499 | Medium | 6.5 | 2023-01-20 | CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote… |
CVE-2021-37498 | Medium | 6.5 | 2023-01-20 | An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intran… |
CVE-2025-25939 | Medium | 6.1 | 2025-03-03 | Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey parameter. |
CVE-2022-30519 | Medium | 6.1 | 2022-12-29 | XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field. |
CVE-2022-28363 | Medium | 6.1 | 2022-04-09 | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username parameter via GET. No au… |
CVE-2021-45422 | Medium | 6.1 | 2022-01-13 | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET. No authen… |
CVE-2018-15574 | Medium | 6.1 | 2018-08-20 | An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2. It is a cross-site scripting vulnerability in the /goform/edit_… |
CVE-2022-28364 | Medium | 5.4 | 2022-04-09 | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file parameter via GET. Auth… |
CVE-2022-28365 | Medium | 5.3 | 2022-04-09 | Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The i… |
CVE-2021-44155 | Medium | 5.3 | 2021-12-13 | An issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Fa… |