CVE-2021-45422

MediumCVSS 6.1

Published: 13/01/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.24%

87th percentile - higher than 87% of all known CVEs

Summary

Reprise License Manager 14.2 is affected by a reflected XSS vulnerability in the 'count' parameter of the /goform/activate_process endpoint. No authentication is required.

Risk Assessment

An attacker can inject malicious JavaScript that executes in the victim's browser, leading to session theft, redirection to malicious sites, or data theft.

Recommendation

Immediately update Reprise License Manager to a version after 14.2 or apply a security patch. If updating is not possible, restrict access to the admin panel and sanitize input parameters.

Original NVD description (English source)

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET. No authentication is required.