Browse all 6 CVE security advisories affecting Snow Software. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Snow Software specializes in IT asset management and software license optimization, helping organizations manage their software infrastructure. Historically, their products have faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation issues. The company has recorded six CVEs to date, with some instances allowing unauthorized access or system compromise. While no major public security incidents have been widely reported, the presence of multiple privilege escalation vulnerabilities in their portfolio suggests potential risks for organizations deploying their solutions without proper hardening. Their security posture appears typical for enterprise software vendors, with vulnerabilities primarily centered on input validation and access control mechanisms.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-1150 | Improper validation of update packages — Inventory Agent CWE-347 | 7.8 | High | 2024-02-08 |
| CVE-2024-1149 | Improper validation of update packages — Inventory Agent CWE-347 | 7.8 | High | 2024-02-08 |
| CVE-2023-7169 | Impersonate vendor signed Powershell scripts — Snow Inventory Agent CWE-290 | 6.0 | Medium | 2024-02-08 |
| CVE-2023-3937 | Cross site scripting vulnerabilities in Snow License Manager — Snow License Manager CWE-79 | 4.8 | Medium | 2023-08-11 |
| CVE-2023-3864 | SQL injection vulnerability in Snow License Manager — SLM CWE-89 | 7.2 | High | 2023-08-11 |
| CVE-2023-2679 | Data leakage in Adobe connector for SPE edition of SLM — SPE SLM CWE-269 | 4.1 | Medium | 2023-05-17 |
This page lists every published CVE security advisory associated with Snow Software. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.