CVE-2021-45422

MEDIUMNuclei

reprisesoftware reprise_license_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2021-45422 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET. No authentication is required.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 5, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

reprise_license_manager

Browse reprisesoftware / reprise_license_manager
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryMEDIUMReprise License Manager 14.2 - Cross-Site ScriptingCVSS 6.1

Reprise License Manager 14.2 contains a cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential session hijacking, defacement, or theft of sensitive information.

Remediation

Apply the latest security patches or updates provided by the vendor to fix the XSS vulnerability in Reprise License Manager 14.2.

WeaknessesCWE-79
Authorsedoardottt
Template tagscve2021cvereprisexssseclistsreprisesoftwarevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:reprisesoftware:reprise_license_manager:14.2:*:*:*:*:*:*:*
Shodan: http.html:"Reprise License"
Shodan: http.html:"reprise license"
Shodan: http.html:"reprise license manager"
FOFA: body="reprise license manager"
FOFA: body="reprise license"
Google: inurl:"/goforms/menu"
https://seclists.org/fulldisclosure/2022/Jan/31 https://www.getinfosec.news/13202933/reprise-license-manager-142-reflected-cross-site-scripting#/ https://nvd.nist.gov/vuln/detail/CVE-2021-45422 http://reprise.com/ https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

5