Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2023-3937

Cross site scripting vulnerabilities in Snow License Manager

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft Snowsoftware
Products
Windows Snow License Manager
CVE-2023-3864

SQL injection vulnerability in Snow License Manager

Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Microsoft Snowsoftware
Products
Windows Snow License Manager