Vulnerabilities in Combodo
88 resultsCVE-2020-15220MEDIUMSession fixationEPSS 0.7%CVE-2021-41245MEDIUMPossible Cross-Site Request Forgery in Combodo iTopEPSS 0.7%CVE-2020-15219MEDIUMSQL query displayed on portal errorEPSS 0.7%CVE-2023-38511MEDIUMiTop Dashboard editor vulnerable dashboard config file parameterEPSS 0.7%CVE-2025-24022HIGHiTop server vulnerable to portal code injectionEPSS 0.7%CVE-2021-41161CRITICALXSS in csvimport in 3.0.0-beta versionsEPSS 0.7%CVE-2021-41162CRITICALCross-site Scripting in Combodo iTopEPSS 0.7%CVE-2026-34741HIGHCombodo iTop: Authentication bypass in exec.php allows PHP file executionEPSS 0.6%CVE-2020-12779MEDIUMCombodo iTop - Stored XSSEPSS 0.6%CVE-2023-34446HIGHiTop XSS vulnerability on pages/preferences.php EPSS 0.6%CVE-2026-39975CRITICALCombodo iTop: Remote code execution using external auth variable valueEPSS 0.6%CVE-2020-15221MEDIUMXSS in the breadcrumbsEPSS 0.6%CVE-2024-51740MEDIUMSSRF through arbitrary PHP class instantiation in the user portal in Combodo iTopEPSS 0.5%CVE-2026-40877HIGHCombodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferencesEPSS 0.5%CVE-2025-47286HIGHCombodo iTop vulnerable to Remote Code Execution in the backup creation functionalityEPSS 0.5%CVE-2026-31936HIGHCombodo iTop: Unauthorized access to object information via search operationEPSS 0.5%CVE-2020-12781MEDIUMCombodo iTop - CSRFEPSS 0.5%CVE-2026-33240HIGHCombodo iTop: Reflected XSS in foreign key search criteriaEPSS 0.5%CVE-2021-21407HIGHPortal : the CSRF token isn't validatedEPSS 0.5%CVE-2026-30866HIGHCombodo iTop: Insecured access to uploaded images via sniffed urlEPSS 0.5%