CVE-2021-37498: Reprisesoftware Reprise License Manager

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function.

Affected products

• Reprisesoftware Reprise License Manager: before 17.0 (fixed in 17.0)

Published 2023-01-20. Last modified 2026-07-09.