Known vulnerabilities in snipe-it 5.3.4 - page 2

Vendor: snipe
Software: snipe-it
Version: 5.3.4
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 84
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting snipe-it version 5.3.4 snipe-it 5.3.4 is affected by 84 vulnerabilities: 13 medium, 71 low Critical High Medium Low

Vulnerabilities (84)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145118 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-62368
CWE-79 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145117 - Improper Access Control
CVE-2026-63493
CWE-284 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145116 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-63498
CWE-79 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145115 - Incorrect Authorization
CWE-863 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145114 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145113 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145112 - Server-Side Request Forgery (SSRF)
CWE-918 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145111 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145110 - Improper Handling of Case Sensitivity
CWE-178 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145109 - Improper Ownership Management
CWE-282 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145108 - Improper input validation
CWE-20 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145107 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145106 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-362 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145105 - Improper Enforcement of Behavioral Workflow
CWE-841 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145104 - Improper Access Control
CWE-284 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145102 - Insufficient Session Expiration
CWE-613 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145101 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145097 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145076 - Missing Authorization
CWE-862 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145074 - Server-Side Request Forgery (SSRF)
CWE-918 Low
No
No
8.7.0 25.08.2026 SB2026082531


Showing elements 21 - 40 out of 84