CVE-2023-22500
- EPSS 0.4%
- Published 26.01.2023 21:18:12
- Last modified 21.11.2024 07:44:56
GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6 are vulnerable to Incorrect Authorization. This vulnerability allow unauthorized access to inventory files. Thus, if anonymous access to FAQ is allowe...
CVE-2023-22722
- EPSS 0.22%
- Published 26.01.2023 21:18:12
- Last modified 21.11.2024 07:45:17
GLPI is a Free Asset and IT Management Software package. Versions 9.4.0 and above, prior to 10.0.6 are subject to Cross-site Scripting. An attacker can persuade a victim into opening a URL containing a payload exploiting this vulnerability. After exp...
CVE-2023-22724
- EPSS 0.14%
- Published 26.01.2023 21:18:12
- Last modified 21.11.2024 07:45:17
GLPI is a Free Asset and IT Management Software package. Versions prior to 10.0.6 are subject to Cross-site Scripting via malicious RSS feeds. An Administrator can import a malicious RSS feed that contains Cross Site Scripting (XSS) payloads inside R...
CVE-2023-22725
- EPSS 0.16%
- Published 26.01.2023 21:18:12
- Last modified 21.11.2024 07:45:17
GLPI is a Free Asset and IT Management Software package. Versions 0.6.0 and above, prior to 10.0.6 are vulnerable to Cross-site Scripting. This vulnerability allow for an administrator to create a malicious external link. This issue is patched in 10....
CVE-2022-41941
- EPSS 0.08%
- Published 26.01.2023 21:16:46
- Last modified 21.11.2024 07:24:07
GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cross-site Scripting. An administrator may store malicious code in help links. This issue is patched in 10.0.6.
CVE-2022-39370
- EPSS 0.08%
- Published 03.11.2022 16:15:10
- Last modified 21.11.2024 07:18:09
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Connected users may gain access to debug panel through...
CVE-2022-39371
- EPSS 0.11%
- Published 03.11.2022 16:15:10
- Last modified 21.11.2024 07:18:09
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Script related HTML tags in assets inventory informati...
CVE-2022-39372
- EPSS 0.14%
- Published 03.11.2022 16:15:10
- Last modified 21.11.2024 07:18:09
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Authenticated users may store malicious code in their ...
CVE-2022-39373
- EPSS 0.09%
- Published 03.11.2022 16:15:10
- Last modified 21.11.2024 07:18:09
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Administrator may store malicious code in entity name....
CVE-2022-39375
- EPSS 0.11%
- Published 03.11.2022 16:15:10
- Last modified 21.11.2024 07:18:09
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Users may be able to create a public RSS feed to injec...