Vulnerabilities (CVE)

Filtered by vendor Snowsoftware Subscribe
Filtered by product Snow License Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-3864 2 Microsoft, Snowsoftware 2 Windows, Snow License Manager 2023-08-18 N/A 7.2 HIGH
Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal.
CVE-2022-0883 2 Microsoft, Snowsoftware 2 Windows, Snow License Manager 2022-06-01 4.6 MEDIUM 7.8 HIGH
SLM has an issue with Windows Unquoted/Trusted Service Paths Security Issue. All installations version 9.x.x prior to 9.20.1 should be patched.