Known vulnerabilities in GLPI - page 4

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 210
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 210 known vulnerabilities: 1 critical, 27 high, 71 medium, 111 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105849 - Improper input validation
CVE-2025-24801
CWE-20 Medium
Available
No
10.0.18 18.03.2025 SB2025022564
#VU105848 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-21619
CWE-89 Low
No
No
10.0.18 18.03.2025 SB2025022564
#VU105846 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-24799
CWE-89 High
Available
Exploited
10.0.18 18.03.2025 SB2025022564
#VU104187 - Improper Access Control
CVE-2025-23024
CWE-284 Medium
No
No
10.0.18 25.02.2025 SB2025022564
#VU104186 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21626
CWE-200 Medium
No
No
10.0.18 25.02.2025 SB2025022564
#VU104185 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-21627
CWE-79 Low
No
No
10.0.18 25.02.2025 SB2025022564
#VU104184 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-11955
CWE-601 Low
No
No
10.0.18 25.02.2025 SB2025022564
#VU99880 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43417
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43418
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45609
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99883 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45610
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-41678
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99879 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47759
CWE-79 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99878 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45611
CWE-79 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99877 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-41679
CWE-89 High
No
No
10.0.17 06.11.2024 SB2024110637
#VU99876 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-45608
CWE-89 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99875 - Improper Access Control
CVE-2024-48912
CWE-284 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99874 - Improper Access Control
CVE-2024-47760
CWE-284 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99873 - Weak password recovery mechanism
CVE-2024-47761
CWE-640 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99869 - Session Fixation
CVE-2024-50339
CWE-384 High
No
No
10.0.17 06.11.2024 SB2024110637


Showing elements 61 - 80 out of 210