Known vulnerabilities in GLPI - page 10

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 206 known vulnerabilities: 1 critical, 27 high, 70 medium, 108 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129533 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-11031
CWE-327 Medium
No
No
9.5.0 07.07.2020 SB2020070756
#VU30288 - Cross-Site Request Forgery (CSRF)
CVE-2020-11060
CWE-352 Medium
Available
No
9.4.6 12.05.2020 SB2020051277
#VU30289 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11062
CWE-79 Low
No
No
9.4.6 12.05.2020 SB2020051277
#VU30290 - Use of Hard-coded Credentials
CVE-2020-5248
CWE-798 Medium
Available
No
9.4.6 12.05.2020 SB2020051277
#VU27570 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11036
CWE-79 Low
No
No
9.4.6 06.05.2020 SB2020050612
SB2020050550
SB2020050551
#VU27569 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-11034
CWE-601 Medium
No
No
9.4.6 06.05.2020 SB2020050612
SB2020050550
SB2020050551
#VU27568 - Exposure of sensitive information to an unauthorized actor
CVE-2020-11033
CWE-200 Medium
No
No
9.4.6 06.05.2020 SB2020050612
SB2020050550
SB2020050551
#VU27567 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-11032
CWE-89 Medium
No
No
9.4.6 06.05.2020 SB2020050612
#VU27566 - Cross-Site Request Forgery (CSRF)
CVE-2020-11035
CWE-352 Low
No
No
9.4.6 06.05.2020 SB2020050612
SB2020050550
SB2020050551
#VU35121 - Improper input validation
CVE-2013-2227
CWE-20 Medium
Available
No
- 01.11.2019 SB2019110118
SB2013062004
SB2013062005
#VU129535 - Improper Access Control
CVE-2019-14666
CWE-284 Low
No
No
9.4.4 24.09.2019 SB2019092463
#VU129534 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
9.4.4 24.09.2019 SB2019092463
#VU35719 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1010307
CWE-79 Low
No
No
- 15.07.2019 SB2019071210
#VU35724 - Credentials Management
CVE-2019-1010310
CWE-255 Low
No
No
- 12.07.2019 SB2019071210
#VU31017 - Weak password recovery mechanism
CVE-2019-13240
CWE-640 Medium
No
No
9.4.1 10.07.2019 SB2019071038
#VU19055 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13239
CWE-79 Medium
No
No
9.4.3 09.07.2019 SB2019071106
#VU38675 - Cross-Site Request Forgery (CSRF)
CVE-2016-7507
CWE-352 High
No
No
- 19.07.2017 SB2017071915
#VU38676 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7509
CWE-79 Low
No
No
- 19.07.2017 SB2017071915
#VU7221 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2016-7508
CWE-89 Low
Available
No
- 28.06.2017 SB2017062811
#VU41606 - Improper input validation
CVE-2013-2225
CWE-20 Medium
Available
No
- 27.05.2014 SB2014051409
SB2013062004
SB2013062005


Showing elements 181 - 200 out of 206