flexera

Latest CVEs · RSS

• CVE-2026-4869 2026-10-13 · CVSS 5.4
  A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites fr
• CVE-2026-19572 2026-10-07 · CVSS 9.3
  A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass c
• CVE-2026-4027 2026-06-19 · CVSS 7.1
  A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficien
• CVE-2026-4026 2026-06-19 · CVSS 8.7
  A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings t
• CVE-2025-12418 2025-11-07 · CVSS 5.6
  Potential Denial of Service issue in all supported versions of Revenera InstallShield version 2025 R1, 2024 R2, 2023 R2, and prior. When e.g., a local administr
• CVE-2024-14012 2025-10-29 · CVSS 7.3
  Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator executes a ren
• CVE-2024-7562 2025-06-12 · CVSS 7.3
  A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. A
• CVE-2021-41528 2025-02-07 · CVSS 5.3
  An error when handling authorization related to the import / export interfaces on the RISC Platform prior to the saas-2021-12-29 release can potentially be expl
• CVE-2021-41527 2025-02-07 · CVSS 2.3
  An error related to the 2-factor authorization (2FA) on the RISC Platform prior to the saas-2021-12-29 release can potentially be exploited to bypass the 2FA. T
• CVE-2023-29080 2025-01-30 · CVSS 8.5
  Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to a Basic MSI or
• CVE-2024-2658 2025-01-30 · CVSS 8.5
  A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent d
• CVE-2023-29081 2024-01-26 · CVSS 5.5
  A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users t
• CVE-2017-6894 2023-03-29
  A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventory
• CVE-2019-8963 2023-03-29
  A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based
• CVE-2021-41526 2023-03-29
  A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerability may allow privilege escalation when
• CVE-2021-41525 2021-09-21
  An issue related to modification of otherwise restricted files through a locally authenticated attacker exists in FlexNet inventory agent and inventory beacon v
• CVE-2020-12083 2021-09-17
  An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64).
• CVE-2020-12082 2021-09-17
  A stored cross-site scripting issue impacts certain areas of the Web UI for Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64).
• CVE-2020-12080 2021-09-17
  A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause l
• CVE-2020-12081 2020-07-31
  An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system file
• CVE-2019-8961 2020-04-21
  A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Because the message reading function
• CVE-2019-8960 2020-04-21
  A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2. The message reading function
• CVE-2013-3494 2020-02-12
  A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external libraries. which could let a
• CVE-2013-3942 2020-02-11
  Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability
• CVE-2013-3489 2020-01-31
  Buffer overflow in Media Player Classic - Home Cinema (MPC-HC) before 1.7.0 allows remote attackers to execute arbitrary code via a crafted RealMedia .rm file