Exposure of GLPI

CRM, Web frameworks
62
exposure score
107
sites use
0
exploited
10
critical

CVEs

183 results
CVE-2025-21627MEDIUMGLPI Cross-site Scripting vulnerabilityEPSS 0.4%CVE-2026-25936MEDIUMGLPI Vulnerable to Authenticated SQL InjectionEPSS 0.4%CVE-2024-45610MEDIUMGLPI has a reflected XSS in ajax/cable.phpEPSS 0.4%CVE-2024-45609MEDIUMGLPI has a Reflected XSS in /front/stat.graph.phpEPSS 0.4%CVE-2024-38370MEDIUMGLPI allows API document download without rightsEPSS 0.4%CVE-2023-53943MEDIUMGLPI 9.5.7 Username Enumeration Vulnerability via Lost Password EndpointEPSS 0.4%CVE-2026-22247MEDIUMGLPI is Vulnerable to SSRF via WebhooksEPSS 0.4%CVE-2026-42317HIGHGLPI vulnerable to arbitrary files deletion by technicianEPSS 0.3%CVE-2026-42321HIGHGLPI has stored XSS in asset locksEPSS 0.3%CVE-2026-48482CRITICALGLPI: RCE via Form importEPSS 0.3%CVE-2025-64516HIGHGLPI incorrectly authorizes access to documentsEPSS 0.3%CVE-2024-45611MEDIUMGLPI has a stored XSS at src/RSSFeed.phpEPSS 0.3%CVE-2020-11031HIGHInsecure encryption algorithm in GLPIEPSS 0.3%CVE-2026-47679HIGHGLPI: arbitrary file deletionEPSS 0.3%CVE-2026-22044MEDIUMGLPI is Vulnerable to Authenticated SQL InjectionEPSS 0.3%CVE-2026-45801MEDIUMGLPI: Unauthorized Debug Mode Activation via Profile Update (Privilege Escalation)EPSS 0.3%CVE-2026-55217MEDIUMGLPI: Unallowed modfication of knowbase items comments and translationsEPSS 0.3%CVE-2026-25937MEDIUMGLPI has a MFA bypassEPSS 0.3%CVE-2026-53627MEDIUMGLPI: Unexpected access to update operations through the APIEPSS 0.3%CVE-2025-53111MEDIUMGLPI exposes data to non-allowed usersEPSS 0.3%