Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Snow Software Component: Snow License Manager Clear all filters
TI-2023-03659 CVE-2023-3937 · GHSA-29h4-7v22-wvxg

Cross site scripting vulnerabilities in Snow License Manager

Priority LOW 22

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00327 Published 2023-08-11 No fix listed CWE-79
TI-2023-03612 CVE-2023-3864 · GHSA-5wj5-j7r2-v5v5

SQL injection vulnerability in Snow License Manager

Priority LOW 34

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00557 Published 2023-08-11 No fix listed CWE-89
TI-2023-02507 CVE-2023-2679 · GHSA-wrjw-f55g-wvxv

Data leakage in Adobe connector for SPE edition of SLM

Priority LOW 20

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00378 Published 2023-05-17 Fixed in 9.30.0 CWE-269
TI-2022-00788 CVE-2022-0883 · GHSA-wxwm-wc4v-7f27

Windows Unquoted/Trusted Service Paths

Priority LOW 34

SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00231 Published 2022-05-18 No fix listed CWE-428