[ CVE-2023-7357 · Published 29 Oct 2026 ]

Vulnerability in Revera FlexNet Publisher

CVSS 8.6 EPSS <1%No fix listed yet

[ Description ]Official description

A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

community.flexera.com/s/article/remote-code-execution-vulnerability-remediated-in-lmadmin

[ Facts ]Key facts

CVE: CVE-2023-7357
EUVD: EUVD-2023-60725
Published: 29 Oct 2026, 17:17 UTC
Updated: 30 Oct 2026, 19:37 UTC
NVD status: Awaiting Analysis
CVSS 4.0: 8.6 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Scored by PSIRT-CNA@flexerasoftware.com
EPSS: 0.38% chance of exploitation in 30 days · higher than 32% of CVEs
CISA SSVC: Exploitation: none · Automatable: no · Impact: total
Weakness: CWE-829

[ Affected ]Affected products

Revera FlexNet Publisher2023 R1 (11.19.3.0) – < 2023 R2 (11.19.4.0)