Medium severity6.1NVD Advisory· Published Aug 20, 2018· Updated Jun 17, 2026
CVE-2018-15574
CVE-2018-15574
Description
An issue was discovered in the license editor in Reprise License Manager (RLM) through 12.2BL2. It is a cross-site scripting vulnerability in the /goform/edit_lf_get_data lf parameter via GET or POST. NOTE: the vendor has stated "We do not consider this a vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:reprisesoftware:reprise_license_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:reprisesoftware:reprise_license_manager:*:*:*:*:*:*:*:*range: <16.0
- (no CPE)range: <=12.2BL2
Patches
Vulnerability mechanics
References
2- bittherapy.net/rce-with-arbitrary-file-write-and-xss-in-reprise-license-manager/nvdExploitThird Party Advisory
- reprisesoftware.com/docs/whats-new.htmlnvdProductRelease Notes
News mentions
0No linked articles in our index yet.