Reprisesoftware

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Reprisesoftware records in CISA KEV

No Reprisesoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Reprise License Manager 19 records HIGH

Records

19 records

TI-2021-19852 CVE-2021-44152 · GHSA-459r-h7r8-fv25

An issue was discovered in Reprise RLM 14.2.

HIGH 76

An issue was discovered in Reprise RLM 14.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.58555 Published 2021-12-13 No fix listed CWE-306

TI-2023-23123 CVE-2023-43183 · GHSA-wj9m-8xm4-fx2j

Incorrect access control in Reprise License Management Software Reprise License Manager…

HIGH 73

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change the password of an admin and hijack their account.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01178 Published 2024-02-03 No fix listed

TI-2023-23618 CVE-2023-44031 · GHSA-mmc3-qp8j-6fpj

Incorrect access control in Reprise License Management Software Reprise License Manager…

HIGH 72

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00689 Published 2024-02-03 No fix listed CWE-284

TI-2025-19185 CVE-2025-25939 · GHSA-g468-6jvw-w4j4

Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in…

MEDIUM 60

Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00275 Published 2025-03-03 No fix listed CWE-79

TI-2018-11109 CVE-2018-15574 · GHSA-6h88-c442-5cvx

An issue was discovered in the license editor in Reprise License Manager (RLM) through…

MEDIUM 60

An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0083 Published 2018-08-20 No fix listed CWE-79

TI-2018-11108 CVE-2018-15573 · GHSA-93xq-g83c-52rf

An issue was discovered in Reprise License Manager (RLM) through 12.2BL2.

MEDIUM 42

An issue was discovered in Reprise License Manager (RLM) through 12.2BL2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02146 Published 2018-08-20 No fix listed CWE-434

TI-2021-15412 CVE-2021-37500 · GHSA-pwww-w2rw-79c6

Directory traversal vulnerability in Reprise License Manager (RLM) web interface before…

LOW 39

Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01009 Published 2023-01-20 No fix listed CWE-22

TI-2018-04125 CVE-2018-5716 · GHSA-9gmc-4822-r428

An issue was discovered in Reprise License Manager 11.0.

LOW 39

An issue was discovered in Reprise License Manager 11.0.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01759 Published 2018-02-21 No fix listed CWE-22

TI-2021-19851 CVE-2021-44151 · GHSA-2x2v-ccf2-cqcf

An issue was discovered in Reprise RLM 14.2.

LOW 38

An issue was discovered in Reprise RLM 14.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02612 Published 2021-12-13 No fix listed CWE-330

TI-2022-11119 CVE-2022-28365 · GHSA-4g2v-6x25-vr7p

Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a…

LOW 36

Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.09322 Published 2022-04-09 No fix listed CWE-425

TI-2021-19853 CVE-2021-44153 · GHSA-96xv-6m77-v224

An issue was discovered in Reprise RLM 14.2.

LOW 36

An issue was discovered in Reprise RLM 14.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02071 Published 2021-12-13 No fix listed

TI-2021-15410 CVE-2021-37498 · GHSA-rq9c-34hq-jqg8

An SSRF issue was discovered in Reprise License Manager (RLM) web interface through…

LOW 36

An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00616 Published 2023-01-20 No fix listed CWE-918

TI-2022-11117 CVE-2022-28363 · GHSA-rpvc-qgrm-r54f

Reprise License Manager 14.2 is affected by a reflected cross-site scripting…

LOW 35

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username parameter via GET.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04901 Published 2022-04-09 No fix listed CWE-79

TI-2021-19854 CVE-2021-44154 · GHSA-fvw8-6hqj-qw58

An issue was discovered in Reprise RLM 14.2.

LOW 35

An issue was discovered in Reprise RLM 14.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01911 Published 2021-12-13 No fix listed CWE-120

TI-2021-20523 CVE-2021-45422 · GHSA-78w8-55r3-m9mq

Reprise License Manager 14.2 is affected by a reflected cross-site scripting…

LOW 33

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03427 Published 2022-01-13 No fix listed CWE-79

TI-2022-12677 CVE-2022-30519 · GHSA-6hgw-f77h-gx4f

XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote…

LOW 32

XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02701 Published 2022-12-29 No fix listed CWE-79

TI-2021-15411 CVE-2021-37499 · GHSA-rw59-3324-mjf5

CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the…

LOW 30

CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00716 Published 2023-01-20 No fix listed CWE-74

TI-2021-19855 CVE-2021-44155 · GHSA-5x86-xgvw-j25w

An issue was discovered in /goform/login_process in Reprise RLM 14.2.

LOW 28

An issue was discovered in /goform/login_process in Reprise RLM 14.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01907 Published 2021-12-13 No fix listed CWE-209

TI-2022-11118 CVE-2022-28364 · GHSA-9r7m-643w-25cp

Reprise License Manager 14.2 is affected by a reflected cross-site scripting…

LOW 26

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file parameter via GET.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0097 Published 2022-04-09 No fix listed CWE-79

Open these records in search →