Vulnerabilities in glpi

5 results

Vexday analysis

GLPI apresenta perfil de risco mínimo com apenas 1 CVE registrado na base, nenhum sob ataque ativo conhecido e sem criticidades extremas. A vulnerabilidade identificada refere-se a Cross-Site Scripting (CWE-79), fraqueza clássica de aplicações web, porém sem indicadores de exploração em campo ou descoberta recente.

CVE-2019-1010307—GLPI GLPI Product 9.3.1 is affected by: Cross Site Scripting (XSS). The impact is: All dropdown values are vulnerable to XSS leading to privEPSS 0.8%CVE-2019-1010310—GLPI GLPI Product 9.3.1 is affected by: Frame and Form tags Injection allowing admins to phish users by putting code in reminder descriptionEPSS 0.7%CVE-2023-28639MEDIUMGLPI vulnerable to reflected Cross-site Scripting in search pagesEPSS 0.6%CVE-2020-11062MEDIUMReflexive XSS in GLPIEPSS 0.5%CVE-2022-39181MEDIUMGLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS)EPSS 0.4%