Flexera vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-19572 A security vulnerability has been identified in FlexNet Publisher lmadmin.Critical 9.3 · Oct 7, 2026
• CVE-2026-4027 A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 and R2 that could allow unauthorized access to attachment files due to insufficienHigh 7.1 · Jun 19, 2026
• CVE-2026-4026 A security vulnerability has been identified in FlexNet Manager Suite 2025 R1 that could allow an authenticated user with read-only access to account settings tHigh 8.7 · Jun 19, 2026
• CVE-2024-2658 A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent dHigh 8.5 · Jan 30, 2025
• CVE-2021-41526 A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action.High 7.8 · Mar 29, 2023
• CVE-2019-8963 A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based High 7.5 · Mar 29, 2023
• CVE-2017-6894 A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventoryHigh 7.8 · Mar 29, 2023
• CVE-2020-12083 An elevated privileges issue related to Spring MVC calls impacts Code Insight v7.x releases up to and including 2020 R1 (7.11.0-64).Critical 9.9 · Sep 17, 2021
• CVE-2020-12080 A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6.High 7.5 · Sep 17, 2021
• CVE-2020-12081 An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2.High 7.5 · Jul 31, 2020
• CVE-2019-8961 A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2.High 7.5 · Apr 21, 2020
• CVE-2019-8960 A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe version 11.16.2.High 7.5 · Apr 21, 2020
• CVE-2018-20034 A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier aHigh 7.5 · Mar 21, 2019
• CVE-2018-20032 A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a High 7.5 · Mar 21, 2019
• CVE-2018-20031 A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier aHigh 7.5 · Mar 21, 2019
• CVE-2018-20033 A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to Critical 9.8 · Feb 25, 2019
• CVE-2018-5819 An error within the "parse_sinar_ia()" function (internal/dcraw_common.cpp) within LibRaw versions prior to 0.19.1 can be exploited to exhaust available CPU resHigh 7.5 · Feb 20, 2019
• CVE-2018-5817 A type confusion error within the "unpacked_load_raw()" function within LibRaw versions prior to 0.19.1 (internal/dcraw_common.cpp) can be exploited to trigger High 7.5 · Feb 20, 2019
• CVE-2018-20030 An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.High 7.5 · Feb 20, 2019
• CVE-2016-10395 In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platform, a boundary error related to a named High 7.8 · Jun 15, 2017
• CVE-2017-6892 In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a speciaHigh 8.8 · Jun 12, 2017
• CVE-2017-6891 Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow bHigh 8.8 · May 22, 2017
• CVE-2017-6885 An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Critical 9.8 · May 16, 2017
• CVE-2016-2542 Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current workinHigh 7.8 · Feb 23, 2016