Vulnerabilities > Combodo > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-04-15 CVE-2023-47123 Cross-site Scripting vulnerability in Combodo Itop 3.1.0/3.1.0211973
iTop is an IT service management platform.
network
low complexity
combodo CWE-79
5.4
2024-04-15 CVE-2023-47622 Cross-site Scripting vulnerability in Combodo Itop
iTop is an IT service management platform.
network
low complexity
combodo CWE-79
6.1
2024-04-15 CVE-2023-47626 Cross-site Scripting vulnerability in Combodo Itop 3.1.0/3.1.0211973
iTop is an IT service management platform.
network
low complexity
combodo CWE-79
6.1
2024-04-15 CVE-2023-38511 Path Traversal vulnerability in Combodo Itop
iTop is an IT service management platform.
network
low complexity
combodo CWE-22
4.3
2024-04-15 CVE-2023-43790 Cross-site Scripting vulnerability in Combodo Itop 3.1.0/3.1.0211973
iTop is an IT service management platform.
network
low complexity
combodo CWE-79
5.4
2023-11-09 CVE-2023-47488 Cross-site Scripting vulnerability in Combodo Itop 3.1.0211973
Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attrib_manager_id parameter in the General Information page and the id parameter in the contact page.
network
low complexity
combodo CWE-79
6.1
2023-10-25 CVE-2023-34446 Cross-site Scripting vulnerability in Combodo Itop 3.0.3
iTop is an open source, web-based IT service management platform.
network
low complexity
combodo CWE-79
6.1
2023-10-25 CVE-2023-34447 Cross-site Scripting vulnerability in Combodo Itop
iTop is an open source, web-based IT service management platform.
network
low complexity
combodo CWE-79
6.1
2022-06-14 CVE-2022-31403 Cross-site Scripting vulnerability in Combodo Itop 3.0.1
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php.
network
low complexity
combodo CWE-79
6.1
2022-06-10 CVE-2022-31402 Cross-site Scripting vulnerability in Combodo Itop 3.0.1
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.
network
low complexity
combodo CWE-79
6.1