reprisesoftware records
19 published records for vendor reprisesoftware.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-284 Improper Access Control1
- CWE-306 Missing Authentication for Critical Function1
- CWE-330 Use of Insufficiently Random Values1
- CWE-425 Direct Request ('Forced Browsing')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
19 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
57Plan | CVE-2021-44152Proof of concept | An issue was discovered in Reprise RLM 14.2.reprisesoftware · reprise license manager · CWE-306 | Critical9.8 | — | 58.5% | Dec 13, 2021 |
36Monitor | CVE-2018-15573No exploit | An issue was discovered in Reprise License Manager (RLM) through 12.2BL2.reprisesoftware · reprise license manager · CWE-434 | High8.8 | — | 2.1% | Aug 19, 2018 |
35Monitor | CVE-2023-43183No exploit | Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change treprisesoftware · reprise license manager | High8.8 | — | 1.1% | Feb 3, 2024 |
33Monitor | CVE-2018-5716No exploit | An issue was discovered in Reprise License Manager 11.0.reprisesoftware · reprise license manager · CWE-22 | High8.1 | — | 1.7% | Feb 21, 2018 |
32Monitor | CVE-2021-37500No exploit | Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM reprisesoftware · reprise license manager · CWE-22 | High8.1 | — | 0.9% | Jan 20, 2023 |
31Monitor | CVE-2021-44151No exploit | An issue was discovered in Reprise RLM 14.2.reprisesoftware · reprise license manager · CWE-330 | High7.5 | — | 2.6% | Dec 13, 2021 |
30Monitor | CVE-2023-44031No exploit | Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitivereprisesoftware · reprise license manager · CWE-284 | High7.5 | — | 0.6% | Feb 3, 2024 |
29Monitor | CVE-2021-44153No exploit | An issue was discovered in Reprise RLM 14.2.reprisesoftware · reprise license manager | High7.2 | — | 2.0% | Dec 13, 2021 |
29Monitor | CVE-2021-44154No exploit | An issue was discovered in Reprise RLM 14.2.reprisesoftware · reprise license manager · CWE-120 | High7.2 | — | 1.9% | Dec 13, 2021 |
26Monitor | CVE-2021-37499No exploit | CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function,reprisesoftware · reprise license manager · CWE-74 | Medium6.5 | — | 0.6% | Jan 20, 2023 |
26Monitor | CVE-2021-37498No exploit | An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outboundreprisesoftware · reprise license manager · CWE-918 | Medium6.5 | — | 0.5% | Jan 20, 2023 |
25Monitor | CVE-2022-28363Proof of concept | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username paramreprisesoftware · reprise license manager · CWE-79 | Medium6.1 | — | 4.9% | Apr 9, 2022 |
25Monitor | CVE-2021-45422Proof of concept | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameterreprisesoftware · reprise license manager · CWE-79 | Medium6.1 | — | 3.2% | Jan 13, 2022 |
25Monitor | CVE-2022-30519Proof of concept | XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password fiereprisesoftware · reprise license manager · CWE-79 | Medium6.1 | — | 2.7% | Dec 29, 2022 |
24Monitor | CVE-2022-28365Proof of concept | Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo.reprisesoftware · reprise license manager · CWE-425 | Medium5.3 | — | 9.3% | Apr 9, 2022 |
24Monitor | CVE-2018-15574No exploit | An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2.reprisesoftware · reprise license manager · CWE-79 | Medium6.1 | — | 0.8% | Aug 19, 2018 |
24Monitor | CVE-2025-25939No exploit | Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey parameter.reprisesoftware · reprise license manager · CWE-79 | Medium6.1 | — | 0.2% | Mar 3, 2025 |
22Monitor | CVE-2021-44155No exploit | An issue was discovered in /goform/login_process in Reprise RLM 14.2.reprisesoftware · reprise license manager · CWE-209 | Medium5.3 | — | 1.9% | Dec 13, 2021 |
21Monitor | CVE-2022-28364No exploit | Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file parareprisesoftware · reprise license manager · CWE-79 | Medium5.4 | — | 0.9% | Apr 9, 2022 |
- CVE-2021-4415257Plan
An issue was discovered in Reprise RLM 14.2.
CriticalCVSS 9.8Proof of conceptEPSS 58%reprisesoftware · reprise license managerDec 13, 2021
- CVE-2018-1557336Monitor
An issue was discovered in Reprise License Manager (RLM) through 12.2BL2.
HighCVSS 8.8No exploitEPSS 2%reprisesoftware · reprise license managerAug 19, 2018
- CVE-2023-4318335Monitor
Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change t
HighCVSS 8.8No exploitEPSS 1%reprisesoftware · reprise license managerFeb 3, 2024
- CVE-2018-571633Monitor
An issue was discovered in Reprise License Manager 11.0.
HighCVSS 8.1No exploitEPSS 1%reprisesoftware · reprise license managerFeb 21, 2018
- CVE-2021-3750032Monitor
Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM
HighCVSS 8.1No exploitEPSS 0%reprisesoftware · reprise license managerJan 20, 2023
- CVE-2021-4415131Monitor
An issue was discovered in Reprise RLM 14.2.
HighCVSS 7.5No exploitEPSS 2%reprisesoftware · reprise license managerDec 13, 2021
- CVE-2023-4403130Monitor
Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive
HighCVSS 7.5No exploitEPSS 0%reprisesoftware · reprise license managerFeb 3, 2024
- CVE-2021-4415329Monitor
An issue was discovered in Reprise RLM 14.2.
HighCVSS 7.2No exploitEPSS 2%reprisesoftware · reprise license managerDec 13, 2021
- CVE-2021-4415429Monitor
An issue was discovered in Reprise RLM 14.2.
HighCVSS 7.2No exploitEPSS 1%reprisesoftware · reprise license managerDec 13, 2021
- CVE-2021-3749926Monitor
CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function,
MediumCVSS 6.5No exploitEPSS 0%reprisesoftware · reprise license managerJan 20, 2023
- CVE-2021-3749826Monitor
An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound
MediumCVSS 6.5No exploitEPSS 0%reprisesoftware · reprise license managerJan 20, 2023
- CVE-2022-2836325Monitor
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username param
MediumCVSS 6.1Proof of conceptEPSS 4%reprisesoftware · reprise license managerApr 9, 2022
- CVE-2021-4542225Monitor
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter
MediumCVSS 6.1Proof of conceptEPSS 3%reprisesoftware · reprise license managerJan 13, 2022
- CVE-2022-3051925Monitor
XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password fie
MediumCVSS 6.1Proof of conceptEPSS 2%reprisesoftware · reprise license managerDec 29, 2022
- CVE-2022-2836524Monitor
Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo.
MediumCVSS 5.3Proof of conceptEPSS 9%reprisesoftware · reprise license managerApr 9, 2022
- CVE-2018-1557424Monitor
An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2.
MediumCVSS 6.1No exploitEPSS 0%reprisesoftware · reprise license managerAug 19, 2018
- CVE-2025-2593924Monitor
Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey parameter.
MediumCVSS 6.1No exploitEPSS 0%reprisesoftware · reprise license managerMar 3, 2025
- CVE-2021-4415522Monitor
An issue was discovered in /goform/login_process in Reprise RLM 14.2.
MediumCVSS 5.3No exploitEPSS 1%reprisesoftware · reprise license managerDec 13, 2021
- CVE-2022-2836421Monitor
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file para
MediumCVSS 5.4No exploitEPSS 0%reprisesoftware · reprise license managerApr 9, 2022