CVE-2021-37498

MEDIUM 6.5CVE-2021-37498 · Published 20/01/2023 · updated 09/07/2026

In short

CVE-2021-37498 is a MEDIUM (CVSS 6.5) vulnerability affecting reprise license manager (reprisesoftware).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.5% of all vulnerabilities.
Fix: update to 17.0 or later.

Package	Affected versions	Patched versions
reprise license manager reprisesoftware	`< 17.0`	`17.0`

Description

An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function.

References

blakduk/Advisories · Third Party Advisory

More vulnerabilities in reprise license manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

reprise license manager

reprisesoftware

< 17.0

17.0

More vulnerabilities in reprise license manager

See all →