Vulnerabilities > Combodo > Itop > 2.6.3
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-07-21 | CVE-2021-21407 | Cross-Site Request Forgery (CSRF) vulnerability in Combodo Itop Combodo iTop is an open source, web based IT Service Management tool. | 4.3 |
| 2021-07-21 | CVE-2021-21406 | Command Injection vulnerability in Combodo Itop Combodo iTop is an open source, web based IT Service Management tool. | 6.5 |
| 2021-01-13 | CVE-2020-15221 | Cross-site Scripting vulnerability in Combodo Itop Combodo iTop is a web based IT Service Management tool. | 3.5 |
| 2021-01-13 | CVE-2020-15220 | Insufficient Session Expiration vulnerability in Combodo Itop Combodo iTop is a web based IT Service Management tool. | 5.8 |
| 2021-01-13 | CVE-2020-15219 | Information Exposure Through an Error Message vulnerability in Combodo Itop Combodo iTop is a web based IT Service Management tool. | 4.0 |
| 2021-01-13 | CVE-2020-15218 | Insufficient Session Expiration vulnerability in Combodo Itop Combodo iTop is a web based IT Service Management tool. | 3.5 |
| 2021-01-12 | CVE-2020-4079 | Information Exposure vulnerability in Combodo Itop Combodo iTop is a web based IT Service Management tool. | 4.0 |
| 2020-08-10 | CVE-2020-12781 | Cross-Site Request Forgery (CSRF) vulnerability in Combodo Itop Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery. | 8.8 |
| 2020-08-10 | CVE-2020-12780 | Incorrect Authorization vulnerability in Combodo Itop A security misconfiguration exists in Combodo iTop, which can expose sensitive information. | 5.0 |
| 2020-08-10 | CVE-2020-12778 | Cross-site Scripting vulnerability in Combodo Itop Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack. | 6.1 |