Known vulnerabilities in iTop 2.6.0-beta
Vendor:
Combodo
Software:
iTop
Version:
2.6.0-beta
Software CPE:
cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*
Website:
https://www.combodo.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Vulnerabilities by Severity
3.2.3-1
3.2.3
2.7.13
3.2.2-1
3.2.2
3.2.1-1
3.2.1
3.1.3
2.7.12
3.1.2
2.7.11
3.2.0-2
3.2.0
3.0.4
2.7.10
3.1.1-1
2.7.9
3.1.0-2
3.1.0-1
3.0.3
2.7.8
3.0.2-1
2.7.7
3.0.1
3.0.0-beta6
3.0.0 beta5
3.0.0 beta4
3.0.0-beta3
3.0.0-beta2
3.0.0-beta
2.7.6
3.0.0
2.7.5-1
2.7.4
2.7.3
2.7.2-1
1.2.0
1.1.181
2.7.1
2.7.0-2
2.7.0-1
2.7.0-beta2
2.7.0-beta
2.6.3
2.6.0-beta
2.5.0-beta
2.4.3
2.4.0-beta
2.3.4
2.3.3
2.3.1
2.3.0-beta
2.3.0
2.2.1
2.2.0-beta
2.2.0
2.1.0-beta
2.1.0
2.0.3-beta
2.0.3
2.0.2-beta
2.0.2
2.0.1-beta
2.0.1
2.0-beta2
2.0-beta
2.0
1.2.1-beta
1.2.1
1.2-beta
1.2
1.1-beta
1.1
1.0.2-beta
1.0.2
1.0.1
1.0-beta
1.0
0.9.1
0.9-beta
0.9
0.8.1.3
0.8
0.7.2
0.7.1
2.6.1
2.4.0
2.4.1
2.4.2
2.5.0
2.5.1
2.6.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU41597 - Improper Privilege Management CVE-2019-19821 |
CWE-269 | Medium | 2.6.3 | 10.08.2020 |
SB2020031628 |
||
| #VU41562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11697 |
CWE-79 | Low | 2.7.0-1 | 10.08.2020 |
SB2020060609 |
||
| #VU41559 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11696 |
CWE-79 | Medium | 2.7.0-1 | 10.08.2020 |
SB2020060609 |
||
| #VU25466 - Exposed Dangerous Method or Function CVE-2019-11215 |
CWE-749 | Medium | 2.6.1 | 19.02.2020 |
SB2020021916 |