Known vulnerabilities in GLPI - page 3

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 206 known vulnerabilities: 1 critical, 27 high, 70 medium, 108 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125064 - Improper Authentication
CVE-2026-25937
CWE-287 Low
No
No
11.0.6 07.04.2026 SB20260406118
#VU125063 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-25936
CWE-89 Low
No
No
11.0.6 07.04.2026 SB20260406118
#VU125062 - Deserialization of Untrusted Data
CVE-2026-22248
CWE-502 Low
No
No
11.0.5 07.04.2026 SB2026020596
#VU125061 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-66417
CWE-89 Medium
No
No
11.0.3 07.04.2026 SB2025120440
#VU124957 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-26263
CWE-89 High
No
No
11.0.6 06.04.2026 SB20260406118
#VU124956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-26027
CWE-79 Low
No
No
11.0.6 06.04.2026 SB20260406118
#VU124955 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-26026
CWE-1336 Low
No
No
11.0.6 06.04.2026 SB20260406118
#VU124954 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-29047
CWE-89 Low
No
No
10.0.24, 11.0.6 06.04.2026 SB20260406118
#VU122415 - Session Fixation
CVE-2026-23624
CWE-384 Low
No
No
10.0.23, 11.0.5 05.02.2026 SB2026020597
#VU122414 - Server-Side Request Forgery (SSRF)
CVE-2026-22247
CWE-918 Medium
No
No
11.0.5 05.02.2026 SB2026020596
#VU122413 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-22044
CWE-89 Medium
No
No
10.0.23 05.02.2026 SB2026020589
#VU119145 - Improper Access Control
CVE-2025-64520
CWE-284 Medium
No
No
10.0.22 04.12.2025 SB2025120440
#VU119144 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-59935
CWE-79 Medium
No
No
10.0.22 04.12.2025 SB2025120440
#VU119143 - Improper Access Control
CVE-2025-64516
CWE-284 Medium
No
No
10.0.22, 11.0.3 04.12.2025 SB2025120440
#VU104189 - Improper Access Control
CVE-2025-25192
CWE-284 Medium
No
No
10.0.18 25.02.2025 SB2025022564
#VU104188 - Improper Authentication
CVE-2025-23046
CWE-287 High
No
No
10.0.18 25.02.2025 SB2025022564
#VU104187 - Improper Access Control
CVE-2025-23024
CWE-284 Medium
No
No
10.0.18 25.02.2025 SB2025022564
#VU104186 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21626
CWE-200 Medium
No
No
10.0.18 25.02.2025 SB2025022564
#VU104185 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-21627
CWE-79 Low
No
No
10.0.18 25.02.2025 SB2025022564
#VU104184 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-11955
CWE-601 Low
No
No
10.0.18 25.02.2025 SB2025022564


Showing elements 41 - 60 out of 206