Approved changes feed: RSS · Atom

cpe:2.3:a:reprisesoftware:reprise_license_manager:14.2:*:*:*:*:*:*:*

part: a version: 14.2 update: *

VendorReprisesoftware (1d2d0385-13d1-588d-8431-51b8d3a3a0ab)
ProductReprise License Manager (483b7782-bea4-5678-ac0f-12657cd19070)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/nozpheratu/rlm_ruby purl2cpe 2026-06-01 10:12:18.352456
pkg:npm/rlm purl2cpe 2026-06-01 10:12:18.352458

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25939 vulnerable 2026-06-08 07:12:51.397991 Details available
Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activate_process via the akey parameter.
Published: 2025-03-03T00:00:00.000Z
Updated: 2025-03-04T16:47:47.966Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28365 vulnerable 2026-06-08 05:42:44.432130 Details available
Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture, and file/directory details.
Published: 2022-04-09T00:00:00.000Z
Updated: 2024-08-03T05:56:14.870Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28364 vulnerable 2026-06-08 05:42:44.431587 Details available
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file parameter via GET. Authentication is required.
Published: 2022-04-09T16:27:44.000Z
Updated: 2024-08-03T05:56:14.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28363 vulnerable 2026-06-08 05:42:44.430207 Details available
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username parameter via GET. No authentication is required.
Published: 2022-04-09T16:26:45.000Z
Updated: 2024-08-03T05:56:15.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45422 vulnerable 2026-06-08 05:36:48.121775 Details available
Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET. No authentication is required.
Published: 2022-01-13T18:15:03.000Z
Updated: 2026-07-09T00:16:10.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44155 vulnerable 2026-06-08 05:36:45.033720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44154 vulnerable 2026-06-08 05:36:45.033257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44153 vulnerable 2026-06-08 05:36:45.032784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44151 vulnerable 2026-06-08 05:36:45.031022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.