CVE-2022-28363: Reprisesoftware Reprise License Manager

Medium severity, CVSS 6.1. EPSS: 4.9% chance of exploitation in the next 30 days.

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username parameter via GET. No authentication is required.

Affected products

• Reprisesoftware Reprise License Manager: from 14.2, before 16.0 (fixed in 16.0)

Published 2022-04-09. Last modified 2026-06-17.