Priority MEDIUM 60
Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey parameter.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00275 · Published 2025-03-03 · No fix listed CWE-79
Priority HIGH 72
Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00689 · Published 2024-02-03 · No fix listed CWE-284
Priority HIGH 73
Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change the password of an admin and hijack their account.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01178 · Published 2024-02-03 · No fix listed
Priority LOW 39
Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01009 · Published 2023-01-20 · No fix listed CWE-22
Priority LOW 30
CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00716 · Published 2023-01-20 · No fix listed CWE-74
Priority LOW 36
An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2023-01-20 · No fix listed CWE-918
Priority LOW 32
XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02701 · Published 2022-12-29 · No fix listed CWE-79
Priority LOW 26
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file parameter via GET.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0097 · Published 2022-04-09 · No fix listed CWE-79
Priority LOW 35
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username parameter via GET.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.04901 · Published 2022-04-09 · No fix listed CWE-79
Priority LOW 36
Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.09322 · Published 2022-04-09 · No fix listed CWE-425
Priority LOW 33
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03427 · Published 2022-01-13 · No fix listed CWE-79
Priority LOW 35
An issue was discovered in Reprise RLM 14.2.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01911 · Published 2021-12-13 · No fix listed CWE-120
Priority LOW 36
An issue was discovered in Reprise RLM 14.2.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02071 · Published 2021-12-13 · No fix listed
Priority LOW 28
An issue was discovered in /goform/login_process in Reprise RLM 14.2.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01907 · Published 2021-12-13 · No fix listed CWE-209
Priority HIGH 76
An issue was discovered in Reprise RLM 14.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.58555 · Published 2021-12-13 · No fix listed CWE-306
Priority LOW 38
An issue was discovered in Reprise RLM 14.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02612 · Published 2021-12-13 · No fix listed CWE-330
Priority MEDIUM 60
An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0083 · Published 2018-08-20 · No fix listed CWE-79
Priority MEDIUM 42
An issue was discovered in Reprise License Manager (RLM) through 12.2BL2.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02146 · Published 2018-08-20 · No fix listed CWE-434
Priority LOW 39
An issue was discovered in Reprise License Manager 11.0.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01759 · Published 2018-02-21 · No fix listed CWE-22
THREATIST.IORead the docs