Snow Software

Products

ProductCVEsExploitedLatest
Inventory Agent2–Feb 8, 2024
SLM1–Aug 11, 2023
Snow Inventory Agent1–Feb 8, 2024
Snow License Manager1–Aug 11, 2023
SPE SLM1–May 17, 2023

Exploited and recent CVEs

  • CVE-2024-1150 High 7.8 Improper validation of update packages 0.1%
  • CVE-2024-1149 High 7.8 Improper validation of update packages 0.1%
  • CVE-2023-7169 Medium 6.0 Impersonate vendor signed Powershell scripts 0.2%
  • CVE-2023-3937 Medium 4.8 Cross site scripting vulnerabilities in Snow License Manager 0.3%
  • CVE-2023-3864 High 7.2 SQL injection vulnerability in Snow License Manager 0.6%
  • CVE-2023-2679 Medium 4.1 Data leakage in Adobe connector for SPE edition of SLM 0.4%