Skip to content
OpenAdvisories

Product · Flexera Software

FlexNet Publisher

8 known vulnerabilities.

FlexNet Publisher at a glance

Last 12 months
2
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability, 1 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202611
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202610
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202510
Dec 202400

Latest advisories

  • Critical
    ICSA-19-323-01 4 CVEs

    Flexera FlexNet Publisher

    These vulnerabilities could allow an attacker to deny the acquisition of a valid license for legal use of the product. The memory corruption vulnerability could allow remote code execution.

    Flexera Software
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Critical 9.3
    CVE-2026-19572

    FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability

    A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing v…

    Flexera Software FlexNet Publisher
  • Medium 4.0
    CVE-2019-25313

    FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)

    FlexNet Publisher 11.12.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious HTML form to trick authenticated users into submitting a request…

    Flexera Software FlexNet Publisher
  • High 8.5
    CVE-2024-2658

    Local privilege escalation in FlexNet Publisher

    A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create th…

    Flexera Software FlexNet Publisher
  • Unscored —
    CVE-2018-20034

    A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet …

    Flexera Software FlexNet Publisher
  • Unscored —
    CVE-2018-20032

    A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publishe…

    Flexera Software FlexNet Publisher
  • Unscored —
    CVE-2018-20031

    A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet …

    Flexera Software FlexNet Publisher
  • Unscored —
    CVE-2018-20033

    A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and …

    Flexera Software FlexNet Publisher
  • Unscored —
    CVE-2016-10395

    In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platf…

    Flexera Software FlexNet Publisher