Skip to content
OpenAdvisories

Vendor

Snow Software

6 known vulnerabilities.

Products

Inventory Agent 2 Snow License Manager 1 SLM 1 Snow Inventory Agent 1 SPE SLM 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.0
    CVE-2023-7169

    Impersonate vendor signed Powershell scripts

    Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0

    Snow Software Snow Inventory Agent
  • Medium 4.8
    CVE-2023-3937

    Cross site scripting vulnerabilities in Snow License Manager

    Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser

    Snow Software Snow License Manager
  • Medium 4.1
    CVE-2023-2679

    Data leakage in Adobe connector for SPE edition of SLM

    Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data.

    Snow Software SPE SLM