PatchTheCVEflexerasoftware vulnerabilities
Recent CVEs affecting flexerasoftware products. 5 tracked.
flexerasoftware has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2017-06-15. Highest priority: CVE-2015-8277 (score 64/100).
- CVE-2017-6885 CRITICAL 9.8 DOWNGRADE An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexN
- CVE-2017-5571 MEDIUM 6.1 UPGRADE Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 1
- CVE-2016-4560 HIGH 7.8 MITIGATE Untrusted search path vulnerability in Flexera InstallAnywhere allows local users to gain privileges via a Tro
- CVE-2016-10395 HIGH 7.8 UPGRADE In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Wind
- CVE-2015-8277 CRITICAL 9.8 UPGRADE Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Sec
FAQ
How do I fix flexerasoftware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is flexerasoftware being exploited right now?
None of the tracked flexerasoftware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which flexerasoftware CVE should I patch first?
CVE-2015-8277 currently ranks highest (64/100): Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Sec.