PatchTheCVEflexnet publisher vulnerabilities and fixes
Recent CVEs affecting flexnet publisher, with upgrade or downgrade steps. 14 tracked.
Also searched as: flexnetpublisher.
flexnet publisher has 14 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 7. Most recent: 2023-03-29. Highest priority: CVE-2011-4135 (score 65/100).
- CVE-2020-12081 HIGH 7.5 DOWNGRADE An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2
- CVE-2020-12080 HIGH 7.5 DOWNGRADE A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6
- CVE-2019-8963 HIGH 7.5 DOWNGRADE A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a cr
- CVE-2019-8961 HIGH 7.5 DOWNGRADE A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin
- CVE-2019-8960 HIGH 7.5 DOWNGRADE A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin
- CVE-2018-20034 HIGH 7.5 UPGRADE UPGRADE A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of
- CVE-2018-20033 CRITICAL 9.8 UPGRADE UPGRADE A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16
- CVE-2018-20032 HIGH 7.5 UPGRADE UPGRADE A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet
- CVE-2018-20031 HIGH 7.5 UPGRADE UPGRADE A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of
- CVE-2017-5571 MEDIUM 6.1 UPGRADE Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 1
- CVE-2016-10395 HIGH 7.8 UPGRADE In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Wind
- CVE-2015-8277 CRITICAL 9.8 UPGRADE Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Sec
- CVE-2011-4135 HIGH 10.0 DOWNGRADE Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License
- CVE-2011-4134 HIGH 10.0 DOWNGRADE Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager)
FAQ
How do I fix flexnet publisher vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flexnet publisher being exploited right now?
None of the tracked flexnet publisher CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flexnet publisher CVE should I patch first?
CVE-2011-4135 currently ranks highest (65/100): Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License .