Known vulnerabilities in GLPI - page 5

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 210
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 210 known vulnerabilities: 1 critical, 27 high, 71 medium, 111 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100567 - Improper Access Control
CVE-2024-38370
CWE-284 Low
No
No
10.0.16 15.11.2024 SB2024070477
#VU99872 - Improper Access Control
CVE-2024-47758
CWE-284 Medium
No
No
10.0.17 06.11.2024 SB2024110637
#VU99871 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43416
CWE-200 Low
No
No
10.0.17 06.11.2024 SB2024110637
#VU99870 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-40638
CWE-89 High
No
No
10.0.17 06.11.2024 SB2024110637
#VU93800 - Unrestricted Upload of File with Dangerous Type
CVE-2024-37147
CWE-434 Medium
No
No
10.0.16 04.07.2024 SB2024070477
#VU93799 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-37149
CWE-94 High
No
No
10.0.16 04.07.2024 SB2024070477
#VU93798 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-37148
CWE-89 High
No
No
10.0.16 04.07.2024 SB2024070477
#VU88967 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29889
CWE-89 High
No
No
10.0.15 24.04.2024 SB2024042416
#VU88966 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-31456
CWE-89 Medium
No
No
10.0.15 24.04.2024 SB2024042416
#VU87533 - Exposure of sensitive information to an unauthorized actor
CVE-2024-27937
CWE-200 Medium
No
No
10.0.13 14.03.2024 SB2024031440
#VU87532 - Exposure of sensitive information to an unauthorized actor
CVE-2024-27930
CWE-200 Medium
No
No
10.0.13 14.03.2024 SB2024031440
#VU87531 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27914
CWE-79 Low
No
No
10.0.13 14.03.2024 SB2024031440
#VU87530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27104
CWE-79 Low
No
No
10.0.13 14.03.2024 SB2024031440
#VU87529 - Server-Side Request Forgery (SSRF)
CVE-2024-27098
CWE-918 Medium
No
No
10.0.13 14.03.2024 SB2024031440
#VU87528 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-27096
CWE-89 High
No
No
10.0.13 14.03.2024 SB2024031440
#VU86041 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-51446
CWE-90 Medium
No
No
10.0.12 02.02.2024 SB2024020232
#VU86040 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23645
CWE-79 Low
No
No
10.0.12 02.02.2024 SB2024020232
#VU125049 - Improper Access Control
CVE-2023-46726
CWE-284 Low
No
No
10.0.11 13.12.2023 SB20231213116
#VU125050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-46727
CWE-89 High
No
No
10.0.11 13.12.2023 SB20231213116
#VU125051 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-43813
CWE-89 Low
No
No
10.0.11 13.12.2023 SB20231213116


Showing elements 81 - 100 out of 210