High severity7.2NVD Advisory· Published Aug 11, 2023· Updated Jun 17, 2026

CVE-2023-3864

Description

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal.

Affected products

Snow Software/Snow License Managerllm-fuzzy
Range: <=9.30.1
Snow Software/Spe Slmcpe-rescue
Range: 8.0.0

Patches

Vulnerability mechanics

References

community.snowsoftware.com/s/feed/0D56M00009gUexuSACnvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000