Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: phpipam/phpipam 1.7.0 Clear all filters
TI-2024-09935 CVE-2024-10721 · GHSA-85ff-r9hw-4grc

Store XSS in phpipam/phpipam

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2025-03-20 Fixed in 1.7.0 CWE-79
TI-2024-09941 CVE-2024-10727 · GHSA-6pvw-p9fg-rwxj

Cross-Site Scripting (XSS) in phpipam/phpipam

Priority MEDIUM 60

A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2025-03-20 Fixed in 1.7.0 CWE-79
TI-2024-09934 CVE-2024-10720 · GHSA-qgm6-wj98-3qh4

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Priority MEDIUM 60

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-20 Fixed in 1.7.0 CWE-79
TI-2024-09936 CVE-2024-10722 · GHSA-vh85-qfmh-23mf

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2025-03-20 Fixed in 1.7.0 CWE-79
TI-2024-09933 CVE-2024-10719 · GHSA-726r-vfh2-3vvj

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability exists in phpipam version 1.5.2, specifically in the circuits options functionality.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00347 Published 2025-03-20 Fixed in 1.7.0 CWE-79
TI-2024-09932 CVE-2024-10718 · GHSA-mj67-2mvx-f778

Cookie without Secure attribute in phpipam/phpipam

Priority HIGH 72

In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00337 Published 2025-03-20 Fixed in 1.7.0 CWE-614
TI-2024-09938 CVE-2024-10724 · GHSA-h5h7-gc2g-vq79

Stored XSS in IPV6 Section in phpipam/phpipam

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2025-03-20 Fixed in 1.7.0 CWE-79
TI-2024-09937 CVE-2024-10723 · GHSA-prx2-6cc4-7qq5

Stored XSS in phpipam/phpipam

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2025-03-20 Fixed in 1.7.0 CWE-79
TI-2024-09939 CVE-2024-10725 · GHSA-8f78-f6p2-mjw7

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2025-03-20 Fixed in 1.7.0 CWE-79