Known vulnerabilities in snipe-it

Vendor: snipe
Software: snipe-it
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting snipe-it snipe-it is affected by 112 known vulnerabilities: 2 high, 25 medium, 84 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145091 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145090 - External Control of File Name or Path
CWE-73 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145089 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145088 - Improper Check for Unusual or Exceptional Conditions
CWE-754 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145087 - Improper Check for Unusual or Exceptional Conditions
CWE-754 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145086 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145085 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145084 - Improper Neutralization of Formula Elements in a CSV File
CWE-1236 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145083 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-362 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145082 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145081 - Improper Neutralization of Formula Elements in a CSV File
CWE-1236 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145080 - External Control of File Name or Path
CWE-73 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145079 - Improper Check for Unusual or Exceptional Conditions
CWE-754 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145078 - Improper Check for Unusual or Exceptional Conditions
CWE-754 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145077 - Improper Encoding or Escaping of Output
CWE-116 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145076 - Missing Authorization
CWE-862 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145075 - Incorrect Calculation
CWE-682 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145074 - Server-Side Request Forgery (SSRF)
CWE-918 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145073 - Resource exhaustion
CWE-400 Low
No
No
8.7.1 25.08.2026 SB2026082532
#VU145072 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 Low
No
No
8.7.0 25.08.2026 SB2026082531


Showing elements 1 - 20 out of 112