Known vulnerabilities in GLPI - page 9

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 206
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 206 known vulnerabilities: 1 critical, 27 high, 70 medium, 108 low Critical High Medium Low

Vulnerabilities (206)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56689 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-39213
CWE-74 Medium
No
No
9.5.6 17.09.2021 SB2021091712
#VU52184 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3486
CWE-79 Low
No
No
9.5.5 13.04.2021 SB2021041360
#VU51218 - Missing Authorization
CVE-2021-21324
CWE-862 Medium
No
No
9.5.4 03.03.2021 SB2021030314
#VU51217 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2021-21327
CWE-470 Medium
Available
No
9.5.4 03.03.2021 SB2021030314
#VU51216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21325
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21313
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21312
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21314
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21258
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51211 - Missing Authorization
CVE-2021-21255
CWE-862 Medium
No
No
9.5.4 03.03.2021 SB2021030314
#VU51210 - Permissions, Privileges, and Access Controls
CVE-2021-21326
CWE-264 High
No
No
9.5.4 03.03.2021 SB2021030314
#VU48703 - Exposure of sensitive information to an unauthorized actor
CVE-2020-27662
CWE-200 Low
No
No
9.5.3 26.11.2020 SB2020113005
#VU48704 - Exposure of sensitive information to an unauthorized actor
CVE-2020-27663
CWE-200 Low
No
No
9.5.3 26.11.2020 SB2020113005
#VU129532 - Improper Access Control
CVE-2020-26212
CWE-284 Low
No
No
9.5.1 25.11.2020 SB2020112527
#VU47420 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-15226
CWE-89 High
No
No
9.5.2 07.10.2020 SB2020100723
#VU47419 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15177
CWE-79 Low
No
No
9.5.2 07.10.2020 SB2020100723
#VU47418 - Exposure of sensitive information to an unauthorized actor
CVE-2020-15217
CWE-200 Medium
No
No
9.5.2 07.10.2020 SB2020100723
#VU47417 - Improper input validation
CVE-2020-15175
CWE-20 Medium
Available
No
9.5.2 07.10.2020 SB2020100723
#VU47416 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-15176
CWE-89 High
No
No
9.5.2 07.10.2020 SB2020100723
#VU31761 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-15108
CWE-89 High
No
No
9.5.1 22.07.2020 SB2020072220


Showing elements 161 - 180 out of 206