Known vulnerabilities in snipe-it - page 2

Vendor: snipe
Software: snipe-it
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 112
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting snipe-it snipe-it is affected by 112 known vulnerabilities: 2 high, 25 medium, 84 low Critical High Medium Low

Vulnerabilities (112)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145111 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145110 - Improper Handling of Case Sensitivity
CWE-178 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145109 - Improper Ownership Management
CWE-282 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145108 - Improper input validation
CWE-20 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145107 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145106 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-362 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145105 - Improper Enforcement of Behavioral Workflow
CWE-841 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145104 - Improper Access Control
CWE-284 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145103 - Authorization Bypass Through User-Controlled Key
CWE-639 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145102 - Insufficient Session Expiration
CWE-613 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145101 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145100 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145099 - Missing Authorization
CWE-862 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145097 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145098 - Observable Response Discrepancy
CWE-204 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145096 - Missing Authorization
CWE-862 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145095 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
8.7.0 25.08.2026 SB2026082531
#VU145094 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145093 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531
#VU145092 - Incorrect Authorization
CWE-863 Low
No
No
8.7.0 25.08.2026 SB2026082531


Showing elements 21 - 40 out of 112