Exposure of GLPI

CRM, Web frameworks

51

exposure score

131

sites use

0

exploited

8

critical

CVEs

163 results

CVE-2022-29250HIGHSQL injection in GLPIEPSS 0.7%CVE-2023-41321MEDIUMSensitive fields enumeration through API in GLPIEPSS 0.7%CVE-2023-41324HIGHAccount takeover through API in GLPIEPSS 0.7%CVE-2022-31068MEDIUMSensitive Data Exposure on Refused Inventory Files in GLPIEPSS 0.7%CVE-2022-24869MEDIUMCross Site Scripting in GLPIEPSS 0.7%CVE-2023-41322MEDIUMPrivilege Escalation from technician to super-admin in GLPIEPSS 0.7%CVE-2023-23610MEDIUMglpi vulnerable to Unauthorized access to data exportEPSS 0.7%CVE-2024-37147MEDIUMGLPI allows Authenticated File Upload to Restricted TicketsEPSS 0.7%CVE-2023-28632HIGHGLPI vulnerable to account takeover by authenticated userEPSS 0.7%CVE-2022-35946MEDIUMSQL injection through plugin controller in GLPIEPSS 0.7%CVE-2024-27104MEDIUMStored XSS in dashboards in GLPIEPSS 0.7%CVE-2022-31143MEDIUMLeak of sensitive information through login page error in GLPIEPSS 0.7%CVE-2021-21258MEDIUMXSS injection in ajax/kanbanEPSS 0.7%CVE-2021-21325MEDIUMStored XSS in budget typeEPSS 0.6%CVE-2022-39262MEDIUMStored Cross-Site Scripting (XSS) on login page in GLPIEPSS 0.6%CVE-2023-22722MEDIUMglpi subject to Cross-site Scripting (XSS) - Reflected EPSS 0.6%CVE-2023-22725MEDIUMglpi vulnerable to XSS on external linksEPSS 0.6%CVE-2023-28639MEDIUMGLPI vulnerable to reflected Cross-site Scripting in search pagesEPSS 0.6%CVE-2022-24868HIGHCross site scripting via SVG file upload in GLPIEPSS 0.6%CVE-2021-21312MEDIUMStored XSS on documentsEPSS 0.6%

← previouspage 4 / 9next →

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →