CVE-2022-30519

moderate-risk

Published 2022-12-29

XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field.

Do I need to act?

0.79% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

51188

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Reprise License Manager

Reprisesoftware

Exploit http://packetstormsecurity.com/files/171627/Reprise-Software-RLM-14.2BL4-Cross-S...

Third Party Advisory https://github.com/earth2sky/Disclosed/blob/main/CVE-2022-30519

Exploit http://packetstormsecurity.com/files/171627/Reprise-Software-RLM-14.2BL4-Cross-S...

Third Party Advisory https://github.com/earth2sky/Disclosed/blob/main/CVE-2022-30519

/ 100

moderate-risk

Severity 23/34 · High

Exploitability 3/34 · Minimal

Exposure 5/34 · Minimal