Known vulnerabilities in iTop

Vendor: Combodo
Software: iTop
Software CPE: cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iTop iTop is affected by 21 known vulnerabilities: 1 high, 7 medium, 13 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31402
CWE-79 Low
Available
No
- 13.06.2022 SB2022061312
#VU62551 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41161
CWE-79 Low
No
No
3.0.0 beta6 25.04.2022 SB2022042507
#VU62550 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41162
CWE-79 Low
No
No
3.0.0 beta6 25.04.2022 SB2022042507
#VU62549 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24870
CWE-79 Low
No
No
3.0.0 beta3 25.04.2022 SB2022042506
#VU55298 - Cross-Site Request Forgery (CSRF)
CVE-2021-21407
CWE-352 Low
No
No
2.7.4, 3.0.0 26.07.2021 SB2021072609
#VU55297 - Cross-Site Request Forgery (CSRF)
CVE-2021-32776
CWE-352 Low
No
No
2.7.4, 3.0.0 26.07.2021 SB2021072609
#VU55296 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32775
CWE-200 Medium
No
No
2.7.4, 3.0.0 26.07.2021 SB2021072609
#VU41597 - Improper Privilege Management
CVE-2019-19821
CWE-269 Medium
No
No
2.6.3 10.08.2020 SB2020031628
#VU41562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11697
CWE-79 Low
No
No
2.7.0-1 10.08.2020 SB2020060609
#VU41559 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11696
CWE-79 Medium
No
No
2.7.0-1 10.08.2020 SB2020060609
#VU41533 - Cross-Site Request Forgery (CSRF)
CVE-2020-12781
CWE-352 Medium
No
No
2.7.1 10.08.2020 SB2020081019
#VU41530 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12780
CWE-200 Medium
No
No
2.7.1 10.08.2020 SB2020081019
#VU41529 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12779
CWE-79 Low
No
No
2.7.1 10.08.2020 SB2020081019
#VU41528 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12778
CWE-79 Low
No
No
2.7.1 10.08.2020 SB2020081019
#VU41527 - Improper Access Control
CVE-2020-12777
CWE-284 High
No
No
2.7.1 10.08.2020 SB2020081019
#VU25467 - Resource Management Errors
CVE-2019-13967
CWE-399 Medium
No
No
2.6.1 19.02.2020 SB2020021916
#VU25466 - Exposed Dangerous Method or Function
CVE-2019-11215
CWE-749 Medium
No
No
2.6.1 19.02.2020 SB2020021916
#VU25455 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13966
CWE-79 Low
No
No
2.6.1 19.02.2020 SB2020021916
#VU25454 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13965
CWE-79 Low
No
No
2.6.1 19.02.2020 SB2020021916
#VU41903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-0805
CWE-79 Low
No
No
- 20.03.2014 SB2014032001


Showing elements 1 - 20 out of 21