CVE-2022-28364

概要

参考情報

• packetstormsecurity.com/files/166647/Reprise-License-Manager-14.2-Cross-Site-Scripting-Information-Disclosure.html · Third Party Advisory
• seclists.org/fulldisclosure/2022/Apr/1 · Exploit
• reprisesoftware.com/products/software-license-management.php · Product

reprise license manager のその他の脆弱性

• CVE-2025-25939中 6.1Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey parameter.
• CVE-2023-44031高 7.5Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive…
• CVE-2023-43183高 8.8Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change t…
• CVE-2021-37500高 8.1Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM …
• CVE-2021-37499中 6.5CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function,…