Skip to contentGlpi-project Glpi vulnerabilities
- glpi-project glpiGLPI reflected XSS in reports pagesCVE-2024-236456.5 Medium
- glpi-project glpiGLPI SQL injection through inventory agent requestCVE-2023-46727EPSS 67.7%8.6 High
- glpi-project glpiGLPI Remote code execution from LDAP server configuration form on PHP 7.4CVE-2023-467267.2 High
- glpi-project glpiglpi Authenticated SQL InjectionCVE-2023-43813EPSS 30.9%6.5 Medium
- glpi-project glpiGLPI vulnerable to unallowed PHP script executionCVE-2023-4280210.0 Critical
- glpi-project glpiFile deletion through document upload process in GLPICVE-2023-424627.7 High
- glpi-project glpiSQL injection in ITIL actors in GLPICVE-2023-424616.5 Medium
- glpi-project glpiPhishing through a login page malicious URL in GLPICVE-2023-418885.3 Medium
- glpi-project glpiAccount takeover via Kanban feature in GLPICVE-2023-41326EPSS 36.5%8.1 High
- glpi-project glpiAccount takeover through API in GLPICVE-2023-413248.1 High
- glpi-project glpiUsers login enumeration by unauthenticated user in GLPICVE-2023-41323EPSS 33.9%5.3 Medium
- glpi-project glpiPrivilege Escalation from technician to super-admin in GLPICVE-2023-413224.9 Medium
- glpi-project glpiSensitive fields enumeration through API in GLPICVE-2023-413214.9 Medium
- glpi-project glpiAccount takeover via SQL Injection in UI layout preferences in GLPICVE-2023-41320EPSS 36.2%8.1 High
- glpi-project glpiGLPI vulnerable to SQL injection via dashboard administrationCVE-2023-372786.8 Medium
- glpi-project glpiGLPI vulnerable to SQL injection through Computer Virtual Machine informationCVE-2023-36808Public exploitEPSS 47.6%8.6 High
- glpi-project glpiGLPI vulnerable to unauthenticated access to Dashboard dataCVE-2023-359407.5 High
- glpi-project glpiGLPI vulnerable to unauthorized access to Dashboard dataCVE-2023-359398.1 High
- glpi-project glpiGLPI vulnerable to SQL injection via inventory agent requestCVE-2023-35924EPSS 52.4%8.6 High
- glpi-project glpiGLPI vulnerable to reflected XSS in search pagesCVE-2023-342446.5 Medium
- glpi-project glpiGLPI vulnerable to unauthorized access to KnowbaseItem dataCVE-2023-341076.5 Medium
- glpi-project glpiGLPI vulnerable to unauthorized access to User dataCVE-2023-341066.5 Medium
- glpi-project glpi-agent, glpi agent +1 moreRemote inventory task command injection when using ssh command modeCVE-2023-342547.7 High
- glpi-project glpiGLPI vulnerable to stored Cross-site Scripting through dashboard administrationCVE-2023-288524.8 Medium
- glpi-project glpiGLPI vulnerable to SQL injection and Stored XSS via inventory agent requestCVE-2023-2884910.0 Critical
- glpi-project glpiGLPI vulnerable to SQL injection through dynamic reportsCVE-2023-288389.6 Critical
- glpi-project glpiGLPI vulnerable to stored Cross-site Scripting in external linksCVE-2023-286364.5 Medium
- glpi-project glpiGLPI vulnerable to Privilege Escalation from Technician to Super-AdminCVE-2023-286348.8 High
- glpi-project glpiGLPI vulnerable to Blind Server-Side Request Forgery (SSRF) in RSS feedsCVE-2023-286333.5 Low
- glpi-project glpiGLPI vulnerable to account takeover by authenticated userCVE-2023-286328.1 High
- glpiGLPI vulnerable to reflected Cross-site Scripting in search pagesCVE-2023-286396.1 Medium
- glpi-project glpiglpi contains XSS Stored inside Standard Interface Help Link href attributeCVE-2022-419416.2 Medium
- glpi-project glpiglpi Unauthorized access to inventory filesCVE-2023-225007.5 High
- glpi-project glpiglpi subject to Cross-site Scripting (XSS) - ReflectedCVE-2023-227226.8 Medium
- glpi-project glpiglpi contains XSS in RSS Description LinkCVE-2023-227246.2 Medium
- glpi-project glpiglpi vulnerable to XSS on external linksCVE-2023-227256.2 Medium
- glpi-project glpiglpi vulnerable to Unauthorized access to data exportCVE-2023-236106.5 Medium
- glpi-project glpiImproper input validation on emails links in GLPICVE-2022-393762.6 Low
- glpi-project glpiCross-Site Scripting (XSS) through public RSS feed in GLPICVE-2022-393754.5 Medium
- glpi-project glpiStored Cross-Site Scripting (XSS) in entity name in GLPICVE-2022-393734.9 Medium
- glpi-project glpiStored Cross-Site Scripting (XSS) in user information in GLPICVE-2022-393723.5 Low
- glpi-project glpiStored Cross-Site Scripting (XSS) through asset inventory in GLPICVE-2022-393717.5 High
- glpi-project glpiImproper access to debug panel in GLPICVE-2022-393704.3 Medium
- glpi-project glpiSQL Injection on REST API in GLPICVE-2022-39323EPSS 37.4%7.4 High
- glpi-project glpiCross-Site Scripting (XSS) in external links in GLPICVE-2022-392774.5 Medium
- glpi-project glpiBlind Server-Side Request Forgery (SSRF) in RSS feeds and planningCVE-2022-392763.5 Low
- glpi-project glpiStored Cross-Site Scripting (XSS) on login page in GLPICVE-2022-392625.2 Medium
- glpi-project glpiuser session persists even after permanently deleting account in GLPICVE-2022-392344.7 Medium
- glpi-project glpiTeclib GLPI Remote Code Execution VulnerabilityCVE-2022-35914In KEVPublic exploitEPSS 99.9%9.8 Critical
- glpi-project glpiStored Cross Site Scripting (XSS) through global search in GLPICVE-2022-311876.8 Medium
- Show moreLoading…