Known vulnerabilities in GLPI - page 6

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 206 known vulnerabilities: 1 critical, 27 high, 70 medium, 108 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81242 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-42802
CWE-94 High
No
No
10.0.10 27.09.2023 SB2023092729
#VU81241 - Exposure of sensitive information to an unauthorized actor
CVE-2023-41888
CWE-200 Medium
No
No
10.0.10 27.09.2023 SB2023092729
#VU81240 - Improper Access Control
CVE-2023-41323
CWE-284 Medium
No
No
10.0.10 27.09.2023 SB2023092729
#VU81237 - Improper Access Control
CVE-2023-41322
CWE-284 Low
No
No
10.0.10 27.09.2023 SB2023092729
#VU81236 - Exposure of sensitive information to an unauthorized actor
CVE-2023-41321
CWE-200 Low
No
No
10.0.10 27.09.2023 SB2023092729
#VU81231 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-42461
CWE-89 Low
No
No
10.0.10 27.09.2023 SB2023092729
#VU125048 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-37278
CWE-89 Low
No
No
10.0.9 11.07.2023 SB2023071185
#VU78053 - Improper Access Control
CVE-2023-34106
CWE-284 Medium
No
No
10.0.8 10.07.2023 SB2023071034
#VU78052 - Improper Access Control
CVE-2023-34107
CWE-284 Medium
No
No
10.0.8 10.07.2023 SB2023071034
#VU78051 - Improper Access Control
CVE-2023-35939
CWE-284 Medium
No
No
10.0.8 10.07.2023 SB2023071034
#VU78050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-34244
CWE-79 Low
No
No
10.0.8 10.07.2023 SB2023071034
#VU78049 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-35924
CWE-89 High
No
No
10.0.8 10.07.2023 SB2023071034
#VU78048 - Exposure of sensitive information to an unauthorized actor
CVE-2023-35940
CWE-200 Medium
No
No
10.0.8 10.07.2023 SB2023071034
#VU78047 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-36808
CWE-89 High
No
No
10.0.8 10.07.2023 SB2023071034
#VU74596 - Improper Authorization
CVE-2023-28634
CWE-285 Low
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74595 - Server-Side Request Forgery (SSRF)
CVE-2023-28633
CWE-918 Medium
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74594 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28636
CWE-79 Low
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74593 - Improper Privilege Management
CVE-2023-28632
CWE-269 Medium
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74592 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-28838
CWE-89 Medium
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28852
CWE-79 Low
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717


Showing elements 101 - 120 out of 206