CVE-2023-3937

Cross site scripting vulnerabilities in Snow License Manager

State: Published
Severity: 4.8 Medium
Published: Aug 11, 2023
Updated: Oct 3, 2024
Reserved: Jul 25, 2023

Description

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser

Scores

CVSS	Score	Vector	Source
3.1	4.8 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N	Snow

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
Snow License ManagerSnow Software	9.0.0 through 9.30.1Affected

References

https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.