Known vulnerabilities in iTop 3.0.0-beta
Vendor:
Combodo
Software:
iTop
Version:
3.0.0-beta
Software CPE:
cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*
Website:
https://www.combodo.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Vulnerabilities by Severity
3.2.3-1
3.2.3
2.7.13
3.2.2-1
3.2.2
3.2.1-1
3.2.1
3.1.3
2.7.12
3.1.2
2.7.11
3.2.0-2
3.2.0
3.0.4
2.7.10
3.1.1-1
2.7.9
3.1.0-2
3.1.0-1
3.0.3
2.7.8
3.0.2-1
2.7.7
3.0.1
3.0.0-beta6
3.0.0 beta5
3.0.0 beta4
3.0.0-beta3
3.0.0-beta2
3.0.0-beta
2.7.6
3.0.0
2.7.5-1
2.7.4
2.7.3
2.7.2-1
1.2.0
1.1.181
2.7.1
2.7.0-2
2.7.0-1
2.7.0-beta2
2.7.0-beta
2.6.3
2.6.0-beta
2.5.0-beta
2.4.3
2.4.0-beta
2.3.4
2.3.3
2.3.1
2.3.0-beta
2.3.0
2.2.1
2.2.0-beta
2.2.0
2.1.0-beta
2.1.0
2.0.3-beta
2.0.3
2.0.2-beta
2.0.2
2.0.1-beta
2.0.1
2.0-beta2
2.0-beta
2.0
1.2.1-beta
1.2.1
1.2-beta
1.2
1.1-beta
1.1
1.0.2-beta
1.0.2
1.0.1
1.0-beta
1.0
0.9.1
0.9-beta
0.9
0.8.1.3
0.8
0.7.2
0.7.1
2.6.1
2.4.0
2.4.1
2.4.2
2.5.0
2.5.1
2.6.0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU62551 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41161 |
CWE-79 | Low | 3.0.0 beta6 | 25.04.2022 |
SB2022042507 |
||
| #VU62550 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41162 |
CWE-79 | Low | 3.0.0 beta6 | 25.04.2022 |
SB2022042507 |
||
| #VU62549 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-24870 |
CWE-79 | Low | 3.0.0 beta3 | 25.04.2022 |
SB2022042506 |