Read the docs

Snow Software

Records12All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Snow Software records in CISA KEV
TI-2021-19919 Apache Log4j2 Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2021-12-10

Components

Products in the NVD configurations · select one to filter the records
Snow Inventory Agent 5 records LOW Snow License Manager 4 records LOW Snow Commander 1 record CRITICAL Snow Inventory Java Scanner 1 record LOW Vm Access Proxy 1 record CRITICAL

Records

4 records in Snow License Manager · all components

TI-2023-03612 CVE-2023-3864 · GHSA-5wj5-j7r2-v5v5

SQL injection vulnerability in Snow License Manager

Priority LOW 34

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00557 Published 2023-08-11 No fix listed CWE-89
TI-2022-00788 CVE-2022-0883 · GHSA-wxwm-wc4v-7f27

Windows Unquoted/Trusted Service Paths

Priority LOW 34

SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00231 Published 2022-05-18 No fix listed CWE-428
TI-2023-03659 CVE-2023-3937 · GHSA-29h4-7v22-wvxg

Cross site scripting vulnerabilities in Snow License Manager

Priority LOW 22

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00327 Published 2023-08-11 No fix listed CWE-79
TI-2023-02507 CVE-2023-2679 · GHSA-wrjw-f55g-wvxv

Data leakage in Adobe connector for SPE edition of SLM

Priority LOW 20

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00378 Published 2023-05-17 Fixed in 9.30.0 CWE-269
Open these records in search →