Vulnerabilities > Combodo > Itop > High

DATE CVE VULNERABILITY TITLE RISK
2024-11-08 CVE-2024-52002 Cross-Site Request Forgery (CSRF) vulnerability in Combodo Itop
Combodo iTop is a simple, web based IT Service Management tool.
network
low complexity
combodo CWE-352
8.8
2024-11-05 CVE-2024-51740 Server-Side Request Forgery (SSRF) vulnerability in Combodo Itop
Combodo iTop is a simple, web based IT Service Management tool.
network
low complexity
combodo CWE-918
8.8
2024-11-05 CVE-2024-31998 Cross-Site Request Forgery (CSRF) vulnerability in Combodo Itop
Combodo iTop is a simple, web based IT Service Management tool.
network
low complexity
combodo CWE-352
8.8
2023-11-09 CVE-2023-47489 Unspecified vulnerability in Combodo Itop 3.1.0211973
CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and ajax.render.php components.
local
low complexity
combodo
7.8
2023-03-14 CVE-2022-39214 Unspecified vulnerability in Combodo Itop
Combodo iTop is an open source, web-based IT service management platform.
network
high complexity
combodo
7.5
2022-04-05 CVE-2022-24780 Unspecified vulnerability in Combodo Itop
Combodo iTop is a web based IT Service Management tool.
network
low complexity
combodo
8.8
2022-04-05 CVE-2021-41245 Unspecified vulnerability in Combodo Itop
Combodo iTop is a web based IT Service Management tool.
network
low complexity
combodo
8.1
2021-10-19 CVE-2021-32663 Unspecified vulnerability in Combodo Itop 2.7.0
iTop is an open source web based IT Service Management tool.
network
low complexity
combodo
7.5
2021-07-21 CVE-2021-32776 Cross-Site Request Forgery (CSRF) vulnerability in Combodo Itop
Combodo iTop is a web based IT Service Management tool.
network
low complexity
combodo CWE-352
8.8
2021-07-21 CVE-2021-21406 Command Injection vulnerability in Combodo Itop
Combodo iTop is an open source, web based IT Service Management tool.
network
low complexity
combodo CWE-77
8.8