CVE-2025-52871
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
An out-of-bounds read vulnerability in License Center. A remote attacker with a user account can exploit it to obtain secret data. The issue is fixed in version 2.0.36 and later.
Risk Assessment
The risk includes leakage of confidential data, potentially compromising information security and leading to unauthorized disclosure of sensitive information.
Recommendation
Update License Center to version 2.0.36 or later to mitigate the vulnerability.
Other vulnerabilities in License Center
See all- CVE-2025-62851Medium
License Center prior to version 1.9.56 contains a path traversal vulnerability. A local attacker with an administrator account can read the contents of unexpected files or system data.
- CVE-2025-53597Medium
A buffer overflow vulnerability in License Center. A remote attacker with an administrator account can exploit it to modify memory or crash processes. The issue is fixed in version 2.0.36 and later.
Original NVD description (English source)
An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later
Vulnerability data from NVD (NIST) · CISA KEV · EPSS