Known vulnerabilities in GLPI - page 8

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 210
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 210 known vulnerabilities: 1 critical, 27 high, 71 medium, 111 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72065 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-35914
CWE-94 Critical
Available
Exploited
10.0.3 08.02.2023 SB2022100662
#VU72064 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-35947
CWE-89 High
No
No
10.0.3 08.02.2023 SB2022100662
#VU69820 - Improper Privilege Management
CVE-2022-39370
CWE-269 Low
No
No
10.0.4 02.12.2022 SB2022112103
#VU69439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39371
CWE-79 Low
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU69438 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39373
CWE-79 Low
No
No
9.5.10, 10.0.4 21.11.2022 SB2022112103
#VU129527 - Server-Side Request Forgery (SSRF)
CVE-2022-36112
CWE-918 Low
No
No
10.0.3 14.09.2022 SB2022091469
#VU129528 - Improper input validation
CVE-2022-35946
CWE-20 Low
No
No
10.0.3 14.09.2022 SB2022091469
#VU129529 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-31187
CWE-80 Low
No
No
10.0.3 14.09.2022 SB2022091469
#VU129530 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31143
CWE-200 Medium
No
No
10.0.3 14.09.2022 SB2022091469
#VU129531 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-35945
CWE-80 Low
No
No
10.0.3 14.09.2022 SB2022091469
#VU65748 - Improper Access Control
CVE-2022-31068
CWE-284 Medium
No
No
10.0.2 25.07.2022 SB2022072516
#VU65747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31056
CWE-89 Medium
Available
No
10.0.2 25.07.2022 SB2022072516
#VU65744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24876
CWE-79 Low
No
No
10.0.1 25.07.2022 SB2022072514
#VU65742 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31061
CWE-89 High
Available
No
9.5.8 25.07.2022 SB2022072512
#VU64209 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-29250
CWE-89 Medium
No
No
10.0.1 13.06.2022 SB2022061315
#VU62584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24868
CWE-79 Low
No
No
10.0.0 26.04.2022 SB2022042605
#VU62583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24869
CWE-79 Low
No
No
10.0.0 26.04.2022 SB2022042605
#VU62582 - Exposure of sensitive information to an unauthorized actor
CVE-2022-24867
CWE-200 Medium
No
No
10.0.0 26.04.2022 SB2022042605
#VU61375 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-44617
CWE-89 High
Available
No
10.0.0 rc2 15.03.2022 SB2022031512
#VU60107 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-21720
CWE-89 High
No
No
9.5.7 27.01.2022 SB2022012756


Showing elements 141 - 160 out of 210