Known vulnerabilities in GLPI - page 8

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 206 known vulnerabilities: 1 critical, 27 high, 70 medium, 108 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72065 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-35914
CWE-94 Critical
Available
Exploited
10.0.3 08.02.2023 SB2022100662
#VU129527 - Server-Side Request Forgery (SSRF)
CVE-2022-36112
CWE-918 Low
No
No
10.0.3 14.09.2022 SB2022091469
#VU129528 - Improper input validation
CVE-2022-35946
CWE-20 Low
No
No
10.0.3 14.09.2022 SB2022091469
#VU129529 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-31187
CWE-80 Low
No
No
10.0.3 14.09.2022 SB2022091469
#VU129530 - Exposure of sensitive information to an unauthorized actor
CVE-2022-31143
CWE-200 Medium
No
No
10.0.3 14.09.2022 SB2022091469
#VU129531 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-35945
CWE-80 Low
No
No
10.0.3 14.09.2022 SB2022091469
#VU65748 - Improper Access Control
CVE-2022-31068
CWE-284 Medium
No
No
10.0.2 25.07.2022 SB2022072516
#VU65747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31056
CWE-89 Medium
Available
No
10.0.2 25.07.2022 SB2022072516
#VU65744 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24876
CWE-79 Low
No
No
10.0.1 25.07.2022 SB2022072514
#VU65742 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-31061
CWE-89 High
Available
No
9.5.8 25.07.2022 SB2022072512
#VU64209 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-29250
CWE-89 Medium
No
No
10.0.1 13.06.2022 SB2022061315
#VU62584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24868
CWE-79 Low
No
No
10.0.0 26.04.2022 SB2022042605
#VU62583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24869
CWE-79 Low
No
No
10.0.0 26.04.2022 SB2022042605
#VU62582 - Exposure of sensitive information to an unauthorized actor
CVE-2022-24867
CWE-200 Medium
No
No
10.0.0 26.04.2022 SB2022042605
#VU61375 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-44617
CWE-89 High
Available
No
10.0.0 rc2 15.03.2022 SB2022031512
#VU60108 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21719
CWE-79 Low
No
No
9.5.7 27.01.2022 SB2022012756
#VU60107 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-21720
CWE-89 High
No
No
9.5.7 27.01.2022 SB2022012756
#VU56688 - Cross-Site Request Forgery (CSRF)
CVE-2021-39209
CWE-352 Low
No
No
9.5.6 17.09.2021 SB2021091712
#VU56687 - Sensitive Cookie Without 'HttpOnly' Flag
CVE-2021-39210
CWE-1004 Medium
No
No
9.5.6 17.09.2021 SB2021091712
#VU56686 - Exposure of sensitive information to an unauthorized actor
CVE-2021-39211
CWE-200 Medium
No
No
9.5.6 17.09.2021 SB2021091712


Showing elements 141 - 160 out of 206