phpIPAM

Products

ProductCVEsExploitedLatest
phpipam/phpipam19–Mar 20, 2025
phpIPAM6–Oct 11, 2026

Exploited and recent CVEs

  • CVE-2026-108720 Medium 4.3 phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages 0.3%
  • CVE-2026-97818 High 8.6 phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php. 0.3%
  • CVE-2026-67602 Critical 9.1 phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache 0.6%
  • CVE-2026-75105 High 7.5 phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter 0.5%
  • CVE-2026-12194 Low 2.3 PHPIPAM Authenticated LFI 0.4%
  • CVE-2024-55093 Medium 5.4 phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts. 0.2%
  • CVE-2024-10721 Low 3.5 Store XSS in phpipam/phpipam 0.3%
  • CVE-2024-10727 Low 3.5 Cross-Site Scripting (XSS) in phpipam/phpipam 0.4%
  • CVE-2024-10720 High 8.2 Stored Cross-site Scripting (XSS) in phpipam/phpipam 0.4%
  • CVE-2024-10722 Low 3.5 Stored Cross-site Scripting (XSS) in phpipam/phpipam 0.3%
  • CVE-2024-10719 Low 2.4 Stored Cross-site Scripting (XSS) in phpipam/phpipam 0.3%
  • CVE-2024-10718 Medium 5.3 Cookie without Secure attribute in phpipam/phpipam 0.3%
  • CVE-2024-10724 Low 3.5 Stored XSS in IPV6 Section in phpipam/phpipam 0.3%
  • CVE-2024-10723 Low 3.5 Stored XSS in phpipam/phpipam 0.3%
  • CVE-2024-10725 Low 3.5 Stored Cross-site Scripting (XSS) in phpipam/phpipam 0.3%
  • CVE-2022-1226 Low 3.5 Cross-site Scripting (XSS) in phpipam/phpipam 0.4%
  • CVE-2024-0787 Medium 5.3 Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam 0.5%
  • CVE-2023-1211 High 7.2 SQL Injection in phpipam/phpipam 3.0%
  • CVE-2023-1212 Medium 5.9 Cross-site Scripting (XSS) - Stored in phpipam/phpipam 0.5%
  • CVE-2023-0678 High 7.5 Missing Authorization in phpipam/phpipam 37.3%
  • CVE-2023-0677 Medium 4.4 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam 0.4%
  • CVE-2023-0676 Low 2.4 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam 1.5%
  • CVE-2022-1225 Medium 6.5 Incorrect Privilege Assignment in phpipam/phpipam 1.0%
  • CVE-2022-1223 Medium 6.5 Incorrect Authorization in phpipam/phpipam 1.0%
  • CVE-2022-1224 Medium 6.5 Improper Authorization in phpipam/phpipam 1.0%