High severity · published Jul 31, 2020
CVE-2020-12081
An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2
7.5
CVSS
1.1%
EPSS
No
On KEV
Description
An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FP
Flexnet Publisher · Flexera
11.14.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-12081
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-12081
Vendor Advisory
https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2020-12081-Remediated-in-FlexNet-Publisher/ta-p/153505
More from Flexnet Publisher
9.8
CVE-2018-20033
A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory…
9.3
CVE-2026-19572
FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability
8.5
CVE-2024-2658
Local privilege escalation in FlexNet Publisher
7.5
CVE-2019-8963
A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using the web-based tool
7.5
CVE-2020-12080
A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6