Skip to contentCombodo Itop vulnerabilities
- combodo itopCross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTopCVE-2023-344458.8 High
- combodo itopCross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTopCVE-2023-344448.8 High
- combodo itopCross-site Scripting vulnerability in the run_query.php page in Combodo iTopCVE-2023-344438.8 High
- combodo itopiTop limit pages/exec.php script to PHP filesCVE-2023-487109.8 Critical
- combodo itopiTop vulnerable to potential formula injection in Excel/CSV export fileCVE-2023-487098.0 High
- combodo itopiTop vulnerable to XSS vulnerability in authent-tokenCVE-2023-476268.8 High
- combodo itopiTop vulnerable to XSS vulnerability in dashlet refreshCVE-2023-476228.8 High
- combodo itopiTop vulnerable to XSS vulnerability in n:n relations "tagset" widgetCVE-2023-471238.7 High
- combodo itopiTop missing silo check on extkey in console and portalCVE-2023-458084.1 Medium
- combodo itopiTop vulnerable to XSS in dashlet modifications ajax endpointsCVE-2023-443966.8 Medium
- combodo itopiTop vulnerable to XSS in friendlyname in object detailsCVE-2023-437905.7 Medium
- combodo itopiTop Dashboard editor vulnerable dashboard config file parameterCVE-2023-385115.0 Medium
- combodo itopAn issue in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a...CVE-2023-474897.8 High
- combodo itopCross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to...CVE-2023-474886.1 Medium
- combodo itopiTop XSS vulnerability on pages/UI.phpCVE-2023-344478.8 High
- combodo itopiTop XSS vulnerability on pages/preferences.phpCVE-2023-344468.8 High
- combodo itopCombodo iTop's weak password reset token leads to account takeoverCVE-2022-392167.4 High
- combodo itopAuthenticated users of Combodo iTop can take over any accountCVE-2022-39214EPSS 25.6%9.6 Critical
- combodo itopITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages...CVE-2022-31403Public exploit6.1 Medium
- combodo itopITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop...CVE-2022-31402Public exploit6.1 Medium
- combodo itopCross-site Scripting in Combodo iTopCVE-2021-411629.3 Critical
- combodo itopStored Cross-site Scripting in Combodo iTopCVE-2022-248708.7 High
- combodo itopXSS in csvimport in 3.0.0-beta versionsCVE-2021-411619.3 Critical
- combodo itopCross-site Scripting in Combodo iTopCVE-2022-248115.4 Medium
- combodo itopCode Injection in Combodo iTopCVE-2022-24780Public exploit8.8 High
- combodo itopPossible Cross-Site Request Forgery in Combodo iTopCVE-2021-412456.5 Medium
- combodo itopReflected XSS in Combodo/iTopCVE-2021-326648.1 High
- combodo itopUnauthorized setup leads to SSRF in Combodo/iTopCVE-2021-326638.7 High
- combodo itopNo CSRF form token cleanup on Windows serversCVE-2021-327766.8 Medium
- combodo itopAny user can see any fields (including mailbox password) with GroupBy DashletCVE-2021-327757.7 High
- combodo itopPortal : the CSRF token isn't validatedCVE-2021-214078.0 High
- combodo itopCommand Injection vulnerability in the Setup WizardCVE-2021-214065.8 Medium
- combodo itopXSS in the breadcrumbsCVE-2020-152216.8 Medium
- combodo itopSession fixationCVE-2020-152206.1 Medium
- combodo itopSQL query displayed on portal errorCVE-2020-152194.3 Medium
- combodo itopAdmin pages are cached and can be embeddedCVE-2020-152186.8 Medium
- combodo itopInformation disclosure vulnerability in iTopCVE-2020-40797.7 High
- combodo itopCombodo iTop - CSRFCVE-2020-127815.7 Medium
- combodo itopCombodo iTop - Security MisconfigurationCVE-2020-127807.5 High
- combodo itopCombodo iTop - Stored XSSCVE-2020-127796.8 Medium
- combodo itopCombodo iTop - Reflected XSSCVE-2020-127787.4 High
- combodo itopCombodo iTop - Broken Access ControlCVE-2020-127777.5 High
- combodo itopIn Combodo iTop a menu shortcut name can be exploited with a stored XSS payload. This is fixed in all iTop packages (community, essential, professional) in version 2.7.0 and iTop essential and iTop pr…CVE-2020-116966.1 Medium
- combodo itopIn Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages (community, essential, professional) for version 2.7.0 and in iTop essential and iTop…CVE-2020-116976.1 Medium
- combodo itopA post-authentication privilege escalation in the web application of Combodo iTop before 2.7...CVE-2019-198218.1 High
- combodo itopiTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage...CVE-2019-139677.5 High
- combodo itopIn iTop through 2.6.0, an XSS payload can be delivered in certain fields (such as icon) of the...CVE-2019-139666.1 Medium
- combodo itopBecause of a lack of sanitization around error messages, multiple Reflective XSS issues exist in...CVE-2019-139656.1 Medium
- combodo itopIn Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of...CVE-2019-112158.1 High
- combodo itopCommand injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators...CVE-2018-106427.2 High
- Show moreLoading…