CVE-2017-5571

Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 11.14.1 and earlier, as used in Citrix License Server for Windows and the Citrix License Server VPX, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

• CWE-601

• http://www.securityfocus.com/bid/96028Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01
• https://support.citrix.com/article/CTX219885Third Party Advisory
• https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager
• https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/
• https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/
• http://www.securityfocus.com/bid/96028Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-18-144-01
• https://support.citrix.com/article/CTX219885Third Party Advisory
• https://www.citect.schneider-electric.com/safety-and-security-central/36-security-notifications/9134-vulnerabilities-within-schneider-electric-floating-license-manager
• https://www.schneider-electric.com/en/download/document/SEVD-2018-137-01/
• https://www.schneider-electric.com/en/download/document/SEVD-2018-144-01/

Published

Mar 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5563LibTIFF version 4.0.7 is vulnerable to a heap-based buffer o…
• CVE-2017-5565Code injection vulnerability in Trend Micro Maximum Security…
• CVE-2017-5566Code injection vulnerability in AVG Ultimate 17.1 (and earli…
• CVE-2017-5567Code injection vulnerability in Avast Premier 12.3 (and earl…
• CVE-2017-5569An issue was discovered in eClinicalWorks Patient Portal 7.0…
• CVE-2017-5570An issue was discovered in eClinicalWorks Patient Portal 7.0…
• CVE-2017-5572An issue was discovered in Linux Foundation xapi in Citrix X…
• CVE-2017-5573An issue was discovered in Linux Foundation xapi in Citrix X…
• CVE-2017-5574SQL injection vulnerability in register.php in GeniXCMS befo…
• CVE-2017-5575SQL injection vulnerability in inc/lib/Options.class.php in …
• CVE-2017-5576Integer overflow in the vc4_get_bcl function in drivers/gpu/…7.8
• CVE-2017-5577The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in…