Read the docs

glpi-project

Records238All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical35CVSS 9.0–10.0
CVSS high89CVSS 7.0–8.9

Exploited now

glpi-project records in CISA KEV
TI-2022-16341 Teclib GLPI Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2023-03-07

Components

Products in the NVD configurations · select one to filter the records
Glpi 188 records CRITICAL Glpi Inventory 4 records MEDIUM Glpi Agent 3 records LOW Activity 1 record HIGH Barcode 1 record HIGH Cmdb 1 record MEDIUM Dashboard 1 record LOW Manageentities 1 record HIGH

Records

188 records in Glpi · all components

TI-2022-13106 CVE-2022-31061

SQL injection on login page in GLPI

Priority HIGH 80

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.51403 Published 2022-06-28 Fixed in 9.5.8, 10.0.2 CWE-89
TI-2020-11947 CVE-2020-15175

Unauthenticated File Deletion in GLPI

Priority HIGH 77

In GLPI before version 9.5.2, the `​pluginimage.send.php​` endpoint allows a user to specify an image from a plugin.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.69859 Published 2020-10-07 Fixed in 9.5.2 CWE-552
TI-2023-21920 CVE-2023-41320

Account takeover via SQL Injection in UI layout preferences in GLPI

Priority HIGH 69

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.362 Published 2023-09-26 Fixed in 10.0.10 CWE-89
TI-2022-18699 CVE-2022-39323

SQL Injection on REST API in GLPI

Priority HIGH 69

GLPI stands for Gestionnaire Libre de Parc Informatique.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.37447 Published 2022-11-03 Fixed in 10.0.4 CWE-89
TI-2024-17957 CVE-2024-27096

SQL Injection in through the search engine

Priority HIGH 68

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.58818 Published 2024-03-18 Fixed in 10.0.13 CWE-89
TI-2023-21926 CVE-2023-41326

Account takeover via Kanban feature in GLPI

Priority HIGH 66

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.36508 Published 2023-09-26 Fixed in 10.0.10 CWE-269
TI-2023-23499 CVE-2023-43813

glpi Authenticated SQL Injection

Priority MEDIUM 62

GLPI is a free asset and IT management software package.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.30915 Published 2023-12-13 Fixed in 10.0.11 CWE-89
TI-2022-13101 CVE-2022-31056

SQL injection with _actor parameter in GLPI

Priority MEDIUM 61

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09901 Published 2022-06-28 Fixed in 10.0.2 CWE-89
TI-2024-24676 CVE-2024-37149

GLPI allows remote code execution through the plugin loader

Priority MEDIUM 59

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.21078 Published 2024-07-10 Fixed in 10.0.16 CWE-73
TI-2024-11091 CVE-2024-11955

GLPI index.php redirect

Priority MEDIUM 57

A vulnerability was found in GLPI up to 10.0.17.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00503 Published 2025-02-25 No fix listed CWE-601
Load more
Open these records in search →