Known vulnerabilities in GLPI - page 7

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 210
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 210 known vulnerabilities: 1 critical, 27 high, 71 medium, 111 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74594 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28636
CWE-79 Low
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74593 - Improper Privilege Management
CVE-2023-28632
CWE-269 Medium
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74592 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-28838
CWE-89 Medium
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74591 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28852
CWE-79 Low
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74590 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28639
CWE-79 Medium
No
No
9.5.13, 10.0.7 07.04.2023 SB2023040717
#VU74589 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-28849
CWE-89 High
No
No
10.0.7 07.04.2023 SB2023040717
#VU71616 - Improper Access Control
CVE-2023-23610
CWE-284 Medium
No
No
9.5.12, 10.0.6 28.01.2023 SB2023012801
#VU71615 - Improper Access Control
CVE-2023-22500
CWE-284 Medium
No
No
10.0.6 28.01.2023 SB2023012801
#VU71614 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22722
CWE-79 Low
No
No
9.5.12, 10.0.6 28.01.2023 SB2023012801
#VU71613 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22725
CWE-79 Low
No
No
9.5.12, 10.0.6 28.01.2023 SB2023012801
#VU71612 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22724
CWE-79 Low
No
No
10.0.6 28.01.2023 SB2023012801
#VU71603 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-41941
CWE-79 Low
No
No
9.5.12, 10.0.6 27.01.2023 SB2023012801
#VU69446 - Insufficient Session Expiration
CVE-2022-39234
CWE-613 Low
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU69445 - Improper input validation
CVE-2022-39376
CWE-20 Low
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU69444 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39262
CWE-79 Low
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU69443 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-39323
CWE-89 High
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU69442 - Server-Side Request Forgery (SSRF)
CVE-2022-39276
CWE-918 Medium
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU69441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39277
CWE-79 Low
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU69440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39372
CWE-79 Low
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU69435 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39375
CWE-79 Low
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103


Showing elements 121 - 140 out of 210