Vulnerability details

CVE-2023-7357

Revera FlexNet Publisher

FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability

CVSS 4.0

8.6High

Official description

A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release.

CVSS scores

Score	Version	Source	Vector
8.6High	4.0	CVEProject cvelistV5 (CNA) (flexera)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`

Affected products

Vendor	Product	Versions	Source
Revera	FlexNet Publisher	2023 R1 (11.19.3.0) ≤ v < 2023 R2 (11.19.4.0)	CVEProject cvelistV5 (CNA)

References and advisories

https://community.flexera.com/s/article/remote-code-execution-vulnerability-remediated-in-lmadmin

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-10-29
Last updated: 2026-10-30
State: Published
Assigner (CNA): flexera

Exploit prediction (EPSS)

0.37%

Probability of exploitation in 30 days

32%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-829
Inclusion of Functionality from Untrusted Control Sphere