Vulnerabilities > Combodo > Itop > 3.1.0.2.11973
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-04-15 | CVE-2023-44396 | Cross-site Scripting vulnerability in Combodo Itop iTop is an IT service management platform. | 5.4 |
| 2024-04-15 | CVE-2023-45808 | Authorization Bypass Through User-Controlled Key vulnerability in Combodo Itop iTop is an IT service management platform. | 5.4 |
| 2024-04-15 | CVE-2023-47123 | Cross-site Scripting vulnerability in Combodo Itop 3.1.0/3.1.0211973 iTop is an IT service management platform. | 5.4 |
| 2024-04-15 | CVE-2023-47622 | Cross-site Scripting vulnerability in Combodo Itop iTop is an IT service management platform. | 6.1 |
| 2024-04-15 | CVE-2023-47626 | Cross-site Scripting vulnerability in Combodo Itop 3.1.0/3.1.0211973 iTop is an IT service management platform. | 6.1 |
| 2024-04-15 | CVE-2023-48709 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Combodo Itop iTop is an IT service management platform. | 8.0 |
| 2024-04-15 | CVE-2023-48710 | Files or Directories Accessible to External Parties vulnerability in Combodo Itop iTop is an IT service management platform. | 9.8 |
| 2024-04-15 | CVE-2023-38511 | Path Traversal vulnerability in Combodo Itop iTop is an IT service management platform. | 4.3 |
| 2024-04-15 | CVE-2023-43790 | Cross-site Scripting vulnerability in Combodo Itop 3.1.0/3.1.0211973 iTop is an IT service management platform. | 5.4 |
| 2023-11-09 | CVE-2023-47488 | Cross-site Scripting vulnerability in Combodo Itop 3.1.0211973 Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attrib_manager_id parameter in the General Information page and the id parameter in the contact page. | 6.1 |