Vulnerabilidades em Combodo

87 resultados
Análise Vexday

Com 66 CVEs catalogadas e nenhuma registrada no catálogo KEV da CISA, o histórico do vendor Combodo apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere pressão operacional menor do ponto de vista de ameaças confirmadas em campo. Ainda assim, quatro vulnerabilidades de severidade crítica merecem atenção prioritária, com destaque para CVE-2022-39214, que concentra o maior índice EPSS observado no portfólio (0,2557) — indicando probabilidade relevante de exploração mesmo sem registro KEV. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), padrão que tende a ser subestimado em triagens, mas que representa risco real em ambientes corporativos dependentes de interfaces web. A ausência de PoCs públicas e de novas CVEs nos últimos 90 dias reduz a superfície de risco imediato, embora não dispense monitoramento contínuo das vulnerabilidades críticas pendentes de correção.

CVE-2026-30866HIGHCombodo iTop: Insecured access to uploaded images via sniffed urlEPSS 0.3%CVE-2025-24969MEDIUMiTop portal user can see any other contact's pictureEPSS 0.3%CVE-2026-33240HIGHCombodo iTop: Reflected XSS in foreign key search criteriaEPSS 0.3%CVE-2026-31936HIGHCombodo iTop: Unauthorized access to object information via search operationEPSS 0.3%CVE-2025-24021MEDIUMiTop doesn't have mass assignment of fields in the portal formEPSS 0.3%CVE-2026-30819HIGHCombodo iTop: Reflected XSS in /pages/ajax.render.php dashboard_id parameterEPSS 0.3%CVE-2026-27463MEDIUMCombodo iTop: Version disclosure via login page logoEPSS 0.3%CVE-2025-27139MEDIUMCombodo iTop vulnerable to stored self Cross-site Scripting in preferencesEPSS 0.2%CVE-2024-31998HIGHCSRF security issue on CSV import in Combodo iTopEPSS 0.2%CVE-2026-30826HIGHCombodo iTop: Reflected XSS in run_query.phpEPSS 0.2%CVE-2026-30890HIGHCombodo iTop: Reflected XSS in synchro/synchro_import.phpEPSS 0.2%CVE-2026-31803HIGHCombodo iTop: Reflected XSS in tag adminEPSS 0.2%CVE-2026-31880HIGHCombodo iTop: Reflected XSS in universal searchEPSS 0.2%CVE-2025-64167HIGHCombodo iTop vulnerable to reflected XSS in webservices/export.phpEPSS 0.2%CVE-2026-34948HIGHCombodo iTop: Access control bypass via OQL joinsEPSS 0.2%CVE-2025-48065HIGHCombodo iTop vulnerable to reflected XSS via objection edition form errorEPSS 0.2%CVE-2025-47773HIGHCombodo iTop has XSS vulnerability in /pages/ajax.render.phpEPSS 0.2%CVE-2025-47932HIGHCombodo iTop vulnerable to reflected XSS in ajax.render.php render_dashboardEPSS 0.2%CVE-2026-34949MEDIUMCombodo iTop: Unauthenticated user can delete .readonly fileEPSS 0.2%CVE-2026-33047MEDIUMCombodo iTop: Object can be locked by a user without write permissionsEPSS 0.2%