CVE-2025-29999

A vulnerability has been identified in Siemens License Server SLS All versions V4.3. The affected application searches for executable files in the application folder without proper validation. This could allow an attacker to execute arbitrary code with administrative privileges by placing a...

CVE-2025-30000

A vulnerability has been identified in Siemens License Server SLS All versions V4.3. The affected application does not properly restrict permissions of the users. This could allow a lowly-privileged attacker to escalate their privileges...

CVE-2025-30000

CVE-2025-30000 affects Siemens License Server (SLS) prior to version 4.3. The issue is improper restriction of user permissions, enabling a low-privileged local attacker to escalate privileges. Multiple sources (Siemens ProductCERT, Red Hat, NVD, and related advisories) confirm affected software ...

CVE-2025-30000

A vulnerability has been identified in Siemens License Server SLS All versions V4.3. The affected application does not properly restrict permissions of the users. This could allow a lowly-privileged attacker to escalate their privileges...

CVE-2025-30000

A vulnerability has been identified in Siemens License Server SLS All versions V4.3. The affected application does not properly restrict permissions of the users. This could allow a lowly-privileged attacker to escalate their privileges...

CVE-2025-29999

A vulnerability has been identified in Siemens License Server SLS All versions V4.3. The affected application searches for executable files in the application folder without proper validation. This could allow an attacker to execute arbitrary code with administrative privileges by placing a...

CVE-2025-29999

CVE-2025-29999 affects Siemens License Server (SLS) prior to v4.3. The issue: the application searches for executable files in its folder without proper validation, allowing an attacker to execute arbitrary code with administrative privileges by placing a malicious executable in the same director...

CVE-2025-29999

A vulnerability has been identified in Siemens License Server SLS All versions V4.3. The affected application searches for executable files in the application folder without proper validation. This could allow an attacker to execute arbitrary code with administrative privileges by placing a...

PT-2025-15407 · Siemens · Siemens License Server

Name of the Vulnerable Software and Affected Versions: Siemens License Server SLS versions prior to V4.3 Description: The issue is related to improper restriction of user permissions, which could allow a low-privileged attacker to escalate their privileges. Recommendations: For versions prior to...

OnPrem | CVAD 1912 upgrade throws an error "The license server doesn't support the hosting network"

During CVAD upgrade from 1912 version to 2203 CU3 version, we receive the error "The license server doesn't support the hosting network" and upgrade fails...

PT-2025-15406 · Siemens · Siemens License Server

Name of the Vulnerable Software and Affected Versions: Siemens License Server SLS versions prior to V4.3 Description: A vulnerability has been identified where the affected application searches for executable files in the application folder without proper validation. This could allow an attacker ...

Siemens License Server (SLS)

SUMMARY Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server SLS and recommends to update to the latest version...

Siemens License Server（SLS） 安全漏洞

Siemens License Server SLS is a tool from Siemens, Germany, for managing and distributing licenses for Siemens software products. A privilege mismanagement vulnerability exists in Siemens License Server that stems from not properly validating an executable file in an application folder, which can...

Siemens License Server（SLS） 信任管理问题漏洞

Siemens License Server SLS is a tool for managing and distributing licenses for Siemens software products from Siemens AG, Germany. A trust management issue vulnerability exists in Siemens License Server SLS versions prior to V4.3 that stems from not properly restricting user privileges, which...

An error occurs when specifying the license server by IP address in Citrix Studio

In Citrix Studio, select Licensing from the left-hand tree and click Change License Server, when entering IP address in the "Change License Server" window that appears, the message "Connected to a trusted server" is displayed. However, when returning to Studio, the error message "Cannot connect t...

Citrix Licensing - powershell cmdlets failing with CommunicationError

Citrix.Licensing.Admin.V1 cmdlets Get-LicCertificate, Get-LicInventory stopped working after License Server upgrade to 11.17.2.0. Build 51000. Citrix Licensing PowerShell Snap-In is installed and used directly on the License Server. Error: CommunicationError CategoryInfo: InvalidOperation Example...

CVE-2024-9167

Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation...

After upgrading from 1912 to 2402, unable to view license usage in Studio

After upgrading Delivery controllers from 1912 to 2402, unable to view license usage in Studio. Studio show error : An error has occurred with the Citrix License Server. Check the license server to make sure it is running, then try again...

CVE-2024-50585

Users who click on a malicious link or visit a website under the control of an attacker can be infected with arbitrary JavaScript which is running in the context of the "Numerix License Server Administration System Login" nlslogin.jsp page. The vulnerability can be triggered by sending a speciall...

CVE-2024-50585

CVE-2024-50585 affects the Numerix License Server (Numerix, Inc.). Users who click a malicious link or visit an attacker-controlled site can have arbitrary JavaScript executed in the context of the Numerix License Server Administration System Login (nlslogin.jsp) page. The vulnerability can be tr...