Known vulnerabilities in GLPI - page 9

Software: GLPI
Software CPE: cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*
Total vulnerabilities: 210
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting GLPI GLPI is affected by 210 known vulnerabilities: 1 critical, 27 high, 71 medium, 111 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60108 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21719
CWE-79 Low
No
No
9.5.7 27.01.2022 SB2022012756
#VU56689 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-39213
CWE-74 Medium
No
No
9.5.6 17.09.2021 SB2021091712
#VU56688 - Cross-Site Request Forgery (CSRF)
CVE-2021-39209
CWE-352 Low
No
No
9.5.6 17.09.2021 SB2021091712
#VU56687 - Sensitive Cookie Without 'HttpOnly' Flag
CVE-2021-39210
CWE-1004 Medium
No
No
9.5.6 17.09.2021 SB2021091712
#VU56686 - Exposure of sensitive information to an unauthorized actor
CVE-2021-39211
CWE-200 Medium
No
No
9.5.6 17.09.2021 SB2021091712
#VU52184 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3486
CWE-79 Low
No
No
9.5.5 13.04.2021 SB2021041360
#VU51218 - Missing Authorization
CVE-2021-21324
CWE-862 Medium
No
No
9.5.4 03.03.2021 SB2021030314
#VU51217 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2021-21327
CWE-470 Medium
Available
No
9.5.4 03.03.2021 SB2021030314
#VU51216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21325
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21313
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21312
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21314
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21258
CWE-79 Low
No
No
9.5.4 03.03.2021 SB2021030314
#VU51211 - Missing Authorization
CVE-2021-21255
CWE-862 Medium
No
No
9.5.4 03.03.2021 SB2021030314
#VU51210 - Permissions, Privileges, and Access Controls
CVE-2021-21326
CWE-264 High
No
No
9.5.4 03.03.2021 SB2021030314
#VU48703 - Exposure of sensitive information to an unauthorized actor
CVE-2020-27662
CWE-200 Low
No
No
9.5.3 26.11.2020 SB2020113005
#VU48704 - Exposure of sensitive information to an unauthorized actor
CVE-2020-27663
CWE-200 Low
No
No
9.5.3 26.11.2020 SB2020113005
#VU129532 - Improper Access Control
CVE-2020-26212
CWE-284 Low
No
No
9.5.1 25.11.2020 SB2020112527
#VU47417 - Improper input validation
CVE-2020-15175
CWE-20 Medium
Available
No
9.5.2 07.10.2020 SB2020100723
#VU47416 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-15176
CWE-89 High
No
No
9.5.2 07.10.2020 SB2020100723


Showing elements 161 - 180 out of 210