← Vulnerability feed

Vulnerability record · CVE-2022-28365 · published 9 April 2022

CVE-2022-28365: Reprisesoftware reprise license manager vulnerability

Reprisesoftware · Reprise License Manager

Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture, and file/directory details.

5.3 CVSS 3.1 Medium EPSS 9.3% · top 4.8% CWE-425 · CWE-425
5.3CVSS 3.1 base score, v2 5.0
9.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture, and file/directory details.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/166647/Reprise-License-Manager-14.2-Cross-Site-Scripting-Information-Disclosure.htm ExploitThird Party AdvisoryVDB Entry
https://seclists.org/fulldisclosure/2022/Apr/1 ExploitMailing ListThird Party Advisory
https://www.reprisesoftware.com/RELEASE_NOTES Broken Link
https://www.reprisesoftware.com/products/software-license-management.php Product
http://packetstormsecurity.com/files/166647/Reprise-License-Manager-14.2-Cross-Site-Scripting-Information-Disclosure.htm ExploitThird Party AdvisoryVDB Entry
https://seclists.org/fulldisclosure/2022/Apr/1 ExploitMailing ListThird Party Advisory
https://www.reprisesoftware.com/RELEASE_NOTES Broken Link
https://www.reprisesoftware.com/products/software-license-management.php Product

Track CVE-2022-28365 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-44152Reprise License Manager unauthenticated password changeReprise RLM 14.2 exposes /goform/change_password_process without any authentication or authorization check. An unauthenticated attacker can set a new…EPSS 59%analysed8.8CVE-2023-43183Reprisesoftware reprise license manager vulnerabilityIncorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to arbitrarily change the passwo…EPSS 1.2%8.8CVE-2018-15573Reprisesoftware reprise license manager unrestricted file upload vulnerabilityAn issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on d…EPSS 2.1%8.1CVE-2021-37500Reprisesoftware reprise license manager path traversal vulnerabilityDirectory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users wit…EPSS 0.98%8.1CVE-2018-5716Reprisesoftware reprise license manager path traversal vulnerabilityAn issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Re…EPSS 1.8%7.5CVE-2023-44031Reprisesoftware reprise license manager improper access control vulnerabilityIncorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in…EPSS 0.69%7.5CVE-2021-44151Reprisesoftware reprise license manager vulnerabilityAn issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex…EPSS 2.5%7.2CVE-2021-44153Reprisesoftware reprise license manager vulnerabilityAn issue was discovered in Reprise RLM 14.2. When editing the license file, it is possible for an admin user to enable an option to run arbitrary exe…EPSS 2.0%

Source: NIST National Vulnerability Database (record CVE-2022-28365), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.