Combodo iTop

• CVE-2023-34445 High 8.8 Cross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTop 0.3%
• CVE-2023-34444 High 8.8 Cross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTop 0.3%
• CVE-2023-34443 High 8.8 Cross-site Scripting vulnerability in the run_query.php page in Combodo iTop 0.3%
• CVE-2023-48710 Critical 9.8 iTop limit pages/exec.php script to PHP files 0.7%
• CVE-2023-48709 High 8.0 iTop vulnerable to potential formula injection in Excel/CSV export file 1.0%
• CVE-2023-47626 High 8.8 iTop vulnerable to XSS vulnerability in authent-token 0.4%
• CVE-2023-47622 High 8.8 iTop vulnerable to XSS vulnerability in dashlet refresh 0.4%
• CVE-2023-47123 High 8.7 iTop vulnerable to XSS vulnerability in n:n relations "tagset" widget 0.3%
• CVE-2023-45808 Medium 4.1 iTop missing silo check on extkey in console and portal 0.3%
• CVE-2023-44396 Medium 6.8 iTop vulnerable to XSS in dashlet modifications ajax endpoints 0.4%
• CVE-2023-43790 Medium 5.7 iTop vulnerable to XSS in friendlyname in object details 0.4%
• CVE-2023-38511 Medium 5.0 iTop Dashboard editor vulnerable dashboard config file parameter 0.7%
• CVE-2023-34447 High 8.8 iTop XSS vulnerability on pages/UI.php 0.8%
• CVE-2023-34446 High 8.8 iTop XSS vulnerability on pages/preferences.php 0.6%
• CVE-2022-39216 High 7.4 Combodo iTop's weak password reset token leads to account takeover 0.9%
• CVE-2022-39214 Critical 9.6 Authenticated users of Combodo iTop can take over any account 25.6%
• CVE-2021-41162 Critical 9.3 Cross-site Scripting in Combodo iTop 0.7%
• CVE-2022-24870 High 8.7 Stored Cross-site Scripting in Combodo iTop 0.9%
• CVE-2021-41161 Critical 9.3 XSS in csvimport in 3.0.0-beta versions 0.7%
• CVE-2022-24811 Medium 5.4 Cross-site Scripting in Combodo iTop 0.7%
• CVE-2022-24780 High 8.8 Code Injection in Combodo iTop 5.7%
• CVE-2021-41245 Medium 6.5 Possible Cross-Site Request Forgery in Combodo iTop 0.7%
• CVE-2021-32664 High 8.1 Reflected XSS in Combodo/iTop 0.8%
• CVE-2021-32663 High 8.7 Unauthorized setup leads to SSRF in Combodo/iTop 1.5%
• CVE-2021-32776 Medium 6.8 No CSRF form token cleanup on Windows servers 0.4%
• CVE-2021-32775 High 7.7 Any user can see any fields (including mailbox password) with GroupBy Dashlet 0.8%
• CVE-2021-21407 High 8.0 Portal : the CSRF token isn't validated 0.5%
• CVE-2021-21406 Medium 5.8 Command Injection vulnerability in the Setup Wizard 1.0%
• CVE-2020-15221 Medium 6.8 XSS in the breadcrumbs 0.6%
• CVE-2020-15220 Medium 6.1 Session fixation 0.7%
• CVE-2020-15219 Medium 4.3 SQL query displayed on portal error 0.7%
• CVE-2020-15218 Medium 6.8 Admin pages are cached and can be embedded 0.8%
• CVE-2020-4079 High 7.7 Information disclosure vulnerability in iTop 0.9%
• CVE-2020-12781 Medium 5.7 Combodo iTop - CSRF 0.5%
• CVE-2020-12780 High 7.5 Combodo iTop - Security Misconfiguration 1.2%
• CVE-2020-12779 Medium 6.8 Combodo iTop - Stored XSS 0.6%
• CVE-2020-12778 High 7.4 Combodo iTop - Reflected XSS 0.8%
• CVE-2020-12777 High 7.5 Combodo iTop - Broken Access Control 1.3%