CVE-2022-28365

Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture, and file/directory details.

• CWE-425

• http://packetstormsecurity.com/files/166647/Reprise-License-Manager-14.2-Cross-Site-Scripting-Information-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• https://seclists.org/fulldisclosure/2022/Apr/1Exploit, Mailing List, Third Party Advisory
• https://www.reprisesoftware.com/RELEASE_NOTESBroken Link
• https://www.reprisesoftware.com/products/software-license-management.phpProduct
• http://packetstormsecurity.com/files/166647/Reprise-License-Manager-14.2-Cross-Site-Scripting-Information-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• https://seclists.org/fulldisclosure/2022/Apr/1Exploit, Mailing List, Third Party Advisory
• https://www.reprisesoftware.com/RELEASE_NOTESBroken Link
• https://www.reprisesoftware.com/products/software-license-management.phpProduct

Published

Apr 9, 2022

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28354In the Active Threads Plugin 1.3.0 for MyBB, the activethrea…6.1
• CVE-2022-28355randomUUID in Scala.js before 1.10.0 generates predictable v…7.5
• CVE-2022-28356In the Linux kernel before 5.17.1, a refcount leak bug was f…5.5
• CVE-2022-28357NATS nats-server 2.2.0 through 2.7.4 allows directory traver…9.8
• CVE-2022-28363Reprise License Manager 14.2 is affected by a reflected cros…6.1
• CVE-2022-28364Reprise License Manager 14.2 is affected by a reflected cros…5.4
• CVE-2022-28366Certain Neko-related HTML parsers allow a denial of service …7.5
• CVE-2022-28367OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smugglin…6.1
• CVE-2022-28368Dompdf 1.2.1 allows remote code execution via a .php file in…9.8
• CVE-2022-28369Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not…9.8
• CVE-2022-2837A flaw was found in coreDNS. This flaw allows a malicious us…6.1
• CVE-2022-28370On Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devi…7.5