Vulnerability Details CVE-2021-37498
An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.4%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2021-37498
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:11.0
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:11.1
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:11.2
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:11.3
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.0
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.0bl2
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.1
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.1bl2
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.2
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.2bl2
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.3
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.3bl4
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:12.4
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:13.0
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:14.2
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:14.2bl4
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:15.0
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:15.1
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:15.2
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:16.0
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:16.1
-
cpe:2.3:a:reprisesoftware:reprise_license_manager:9.0bl2