Cross site scripting vulnerabilities in Snow License Manager
CVE-2023-3937

4.8MEDIUM

Key Information:

Vendor: Snow Software
Status: Snow License Manager
Vendor: CVE Published:; 11 August 2023

🔔 Create Snow Software Vulnerability Alert

What is CVE-2023-3937?

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Snow License Manager Windows 9.0.0 <= 9.30.1

References

https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC

CVSS V3.1

Score:

4.8

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Aug 11, 2023
Vulnerability Reserved
Jul 25, 2023

Credit

Can Doğu & Himanshu Giri

JSON

Snow Software