CVE-2008-1093: Acresso Flexnet Connect

High severity, CVSS 9.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet Connect servers, which allows remote man-in-the-middle attackers to execute arbitrary VBScript code via Trojan horse Rules.

Affected products

• Acresso Flexnet Connect: any version
• Acresso Intallshield Update Agent: any version

Published 2008-09-18. Last modified 2026-06-16.