Vulnerabilities > Combodo > Itop > 2.0.3

DATE CVE VULNERABILITY TITLE RISK
2024-11-05 CVE-2024-31998 Cross-Site Request Forgery (CSRF) vulnerability in Combodo Itop
Combodo iTop is a simple, web based IT Service Management tool.
network
low complexity
combodo CWE-352
8.8
2024-11-05 CVE-2024-32870 Unspecified vulnerability in Combodo Itop
Combodo iTop is a simple, web based IT Service Management tool.
network
low complexity
combodo
5.8
2024-04-15 CVE-2023-44396 Cross-site Scripting vulnerability in Combodo Itop
iTop is an IT service management platform.
network
low complexity
combodo CWE-79
5.4
2024-04-15 CVE-2023-45808 Authorization Bypass Through User-Controlled Key vulnerability in Combodo Itop
iTop is an IT service management platform.
network
low complexity
combodo CWE-639
5.4
2024-04-15 CVE-2023-47622 Cross-site Scripting vulnerability in Combodo Itop
iTop is an IT service management platform.
network
low complexity
combodo CWE-79
6.1
2024-04-15 CVE-2023-48709 Improper Neutralization of Formula Elements in a CSV File vulnerability in Combodo Itop
iTop is an IT service management platform.
network
low complexity
combodo CWE-1236
8.0
2024-04-15 CVE-2023-48710 Files or Directories Accessible to External Parties vulnerability in Combodo Itop
iTop is an IT service management platform.
network
low complexity
combodo CWE-552
critical
9.8
2023-10-25 CVE-2023-34447 Cross-site Scripting vulnerability in Combodo Itop
iTop is an open source, web-based IT service management platform.
network
low complexity
combodo CWE-79
6.1
2023-03-14 CVE-2022-39214 Unspecified vulnerability in Combodo Itop
Combodo iTop is an open source, web-based IT service management platform.
network
high complexity
combodo
7.5
2023-03-14 CVE-2022-39216 Unspecified vulnerability in Combodo Itop
Combodo iTop is an open source, web-based IT service management platform.
network
low complexity
combodo
critical
9.8