VULNERABILITY INTELLIGENCE

CVE-2021-37499

CVSS score6.5 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2023-01-20
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-74

Primary references