glpi-project

Records238All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical35CVSS 9.0–10.0

CVSS high89CVSS 7.0–8.9

Exploited now

glpi-project records in CISA KEV

Products in the NVD configurations · select one to filter the records

4 records in Glpi Inventory · all components

TI-2022-13126 CVE-2022-31082

MEDIUM 44

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01039 Published 2022-06-27 Fixed in 1.0.2 CWE-89

TI-2022-13107 CVE-2022-31062

LOW 39

### Impact A plugin public script can be used to read content of system files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05914 Published 2022-06-20 Fixed in 1.0.2 CWE-22

TI-2026-21015 CVE-2026-26001

LOW 37

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00225 Published 2026-03-17 Fixed in 1.6.6 CWE-89

TI-2026-20697 CVE-2026-25590

LOW 27

The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00197 Published 2026-03-03 Fixed in 1.6.6 CWE-79