Read the docs

Combodo

Records104All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high59CVSS 7.0–8.9

Exploited now

Combodo records in CISA KEV

No Combodo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Itop 81 records HIGH Teemip 1 record MEDIUM

Records

81 records in Itop · all components

TI-2022-08593 CVE-2022-24780

Code Injection in Combodo iTop

Priority HIGH 73

Combodo iTop is a web based IT Service Management tool.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05698 Published 2022-04-05 Fixed in 2.7.6 CWE-94
TI-2023-25672 CVE-2023-47488 · GHSA-2986-9f3x-j93c

Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local…

Priority HIGH 66

Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attrib_manager_id parameter in the General Information page and the i…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01243 Published 2023-11-09 No fix listed CWE-79
TI-2022-08624 CVE-2022-24811

Cross-site Scripting in Combodo iTop

Priority MEDIUM 58

Combodi iTop is a web based IT Service Management tool.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00749 Published 2022-04-05 Fixed in 2.7.6 CWE-79
TI-2021-18001 CVE-2021-41162

Cross-site Scripting in Combodo iTop

Priority MEDIUM 43

Combodo iTop is a web based IT Service Management tool.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00656 Published 2022-04-21 Fixed in 3.0.0-beta6 CWE-79
TI-2021-18000 CVE-2021-41161

XSS in csvimport in 3.0.0-beta versions

Priority MEDIUM 43

Combodo iTop is a web based IT Service Management tool.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00656 Published 2022-04-21 Fixed in 3.0.0-beta6 CWE-79
TI-2018-07526 CVE-2018-10642 · GHSA-w7xq-2x44-5m2x

Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated…

Priority MEDIUM 42

Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configuration, because web/env-production/itop-config/config.php con…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.07381 Published 2018-05-02 No fix listed CWE-94
TI-2023-17273 CVE-2023-34447

iTop XSS vulnerability on pages/UI.php

Priority MEDIUM 40

iTop is an open source, web-based IT service management platform.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00809 Published 2023-10-25 Fixed in 3.0.4 CWE-79
Load more
Open these records in search →