Vulnerabilidades en Combodo
88 resultadosCVE-2023-47622HIGHiTop vulnerable to XSS vulnerability in dashlet refreshEPSS 0.4%CVE-2026-27490HIGHCombodo iTop: Weak secret generation for inline imageEPSS 0.4%CVE-2026-27462HIGHCombodo iTop: User enumeration via password resetEPSS 0.4%CVE-2026-31803HIGHCombodo iTop: Reflected XSS in tag adminEPSS 0.4%CVE-2026-30890HIGHCombodo iTop: Reflected XSS in synchro/synchro_import.phpEPSS 0.4%CVE-2026-31880HIGHCombodo iTop: Reflected XSS in universal searchEPSS 0.4%CVE-2026-30826HIGHCombodo iTop: Reflected XSS in run_query.phpEPSS 0.4%CVE-2024-51995HIGHLogic bug in ajax.render.php allows for bypass of 'backOffice' access control in Combodo iTopEPSS 0.4%CVE-2023-44396MEDIUMiTop vulnerable to XSS in dashlet modifications ajax endpointsEPSS 0.4%CVE-2026-34948HIGHCombodo iTop: Access control bypass via OQL joinsEPSS 0.4%CVE-2026-34836MEDIUMCombodo iTop: Improper access control in ajax.render.php and ajax.document.phpEPSS 0.4%CVE-2024-52000HIGHReflected Cross-site Scripting exploit in Combodo iTopEPSS 0.4%CVE-2023-47626HIGHiTop vulnerable to XSS vulnerability in authent-tokenEPSS 0.4%CVE-2021-32776MEDIUMNo CSRF form token cleanup on Windows serversEPSS 0.4%CVE-2026-34949MEDIUMCombodo iTop: Unauthenticated user can delete .readonly fileEPSS 0.4%CVE-2026-33047MEDIUMCombodo iTop: Object can be locked by a user without write permissionsEPSS 0.4%CVE-2026-30819HIGHCombodo iTop: Reflected XSS in /pages/ajax.render.php dashboard_id parameterEPSS 0.4%CVE-2023-43790MEDIUMiTop vulnerable to XSS in friendlyname in object detailsEPSS 0.4%CVE-2024-51994HIGHCross-site Scripting in portal picture upload in Combodo iTopEPSS 0.4%CVE-2024-31448HIGHCross-site Scripting vulnerability in link CSV import in Combodo iTopEPSS 0.4%