CVE-2025-25939

Summary

CVE-2025-25939 is a newly identified vulnerability affecting Reprise License Manager version 14.2. Hackers can exploit this issue through a reflected cross-site scripting (XSS) attack on the /goform/activate_process endpoint. The akey parameter is the target of this attack, allowing attackers to inject malicious code into a user's web browser when they visit a specially crafted link. Successful exploitation could lead to session hijacking, data theft, and other forms of unauthorized access. Users are advised to upgrade to the latest version of Reprise License Manager as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.