Known vulnerabilities in GLPI - page 4

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 206 known vulnerabilities: 1 critical, 27 high, 70 medium, 108 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105849 - Improper input validation
CVE-2025-24801
CWE-20 Medium
Available
No
10.0.18 18.03.2025 SB2025022564
#VU105848 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-21619
CWE-89 Low
No
No
10.0.18 18.03.2025 SB2025022564
#VU105846 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-24799
CWE-89 High
Available
Exploited
10.0.18 18.03.2025 SB2025022564
#VU99880 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43417
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43418
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45609
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45610
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41678
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99879 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47759
CWE-79 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45611
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99877 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-41679
CWE-89 High
No
No
10.0.17 06.11.2024 SB2024110637
#VU99876 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-45608
CWE-89 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99875 - Improper Access Control
CVE-2024-48912
CWE-284 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99874 - Improper Access Control
CVE-2024-47760
CWE-284 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99873 - Weak password recovery mechanism
CVE-2024-47761
CWE-640 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99872 - Improper Access Control
CVE-2024-47758
CWE-284 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99871 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43416
CWE-200 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99870 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-40638
CWE-89 High
No
No
10.0.17 06.11.2024 SB2024110637
#VU99869 - Session Fixation
CVE-2024-50339
CWE-384 High
No
No
10.0.17 06.11.2024 SB2024110637
#VU93798 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-37148
CWE-89 High
No
No
10.0.16 04.07.2024 SB2024070477


Showing elements 61 - 80 out of 206