Priority HIGH 82
GLPI is an open source IT Asset Management, issue tracking system and service desk system.
Teclib-edition
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Teclib-edition records in CISA KEVNo Teclib-edition vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records
TI-2019-07550 CVE-2019-10232 · GHSA-hf3r-7c2r-pvhg
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
Priority MEDIUM 62
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.
Priority MEDIUM 60
Formcreator is a GLPI plugin which allow creation of custom forms and the creation of one or more tickets when the form is filled.
TI-2019-07549 CVE-2019-10231 · GHSA-rqpr-xfvf-qr4v
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing…
Priority MEDIUM 47
Teclib GLPI before 9.4.1.1 is affected by a PHP type juggling vulnerability allowing bypass of authentication.
TI-2019-09516 CVE-2019-12723 · GHSA-4g9c-8w59-m7p5
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI.
Priority MEDIUM 46
An issue was discovered in the Teclib Fields plugin through 1.9.2 for GLPI.
Priority MEDIUM 41
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.
Priority MEDIUM 40
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing.
TI-2026-20966 CVE-2026-25936
GLPI Vulnerable to Authenticated SQL Injection
Priority LOW 38
GLPI is a free Asset and IT management software package.
TI-2026-20967 CVE-2026-25937
GLPI has a MFA bypass
Priority LOW 31
GLPI is a free Asset and IT management software package.
TI-2021-16575 CVE-2021-39190
SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Priority LOW 31
The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI.
TI-2023-13361 CVE-2023-28855
Fields GLPI plugin vulnerable to unauthorized write access to additional fields
Priority LOW 30
Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.
TI-2019-09517 CVE-2019-12724 · GHSA-vj4j-j5g4-3hfq
An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI.
Priority LOW 30
An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI.
TI-2018-05287 CVE-2018-7289 · GHSA-f67c-8p6v-x8xg
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito…
Priority LOW 20
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2.