Vulnerabilities > Combodo > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-25 CVE-2023-34447 Cross-site Scripting vulnerability in Combodo Itop
iTop is an open source, web-based IT service management platform.
network
low complexity
combodo CWE-79
6.1
2022-06-14 CVE-2022-31403 Cross-site Scripting vulnerability in Combodo Itop 3.0.1
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php.
network
low complexity
combodo CWE-79
6.1
2022-06-10 CVE-2022-31402 Cross-site Scripting vulnerability in Combodo Itop 3.0.1
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.
network
low complexity
combodo CWE-79
6.1
2022-04-21 CVE-2021-41161 Cross-site Scripting vulnerability in Combodo Itop
Combodo iTop is a web based IT Service Management tool.
network
low complexity
combodo CWE-79
6.1
2022-04-21 CVE-2021-41162 Cross-site Scripting vulnerability in Combodo Itop
Combodo iTop is a web based IT Service Management tool.
network
low complexity
combodo CWE-79
6.1
2022-04-21 CVE-2022-24870 Cross-site Scripting vulnerability in Combodo Itop 3.0.0
Combodo iTop is a web based IT Service Management tool.
network
low complexity
combodo CWE-79
5.4
2022-04-05 CVE-2022-24811 Unspecified vulnerability in Combodo Itop
Combodi iTop is a web based IT Service Management tool.
network
low complexity
combodo
5.4
2021-10-19 CVE-2021-32664 Unspecified vulnerability in Combodo Itop 2.7.0
Combodo iTop is an open source web based IT Service Management tool.
network
low complexity
combodo
4.8
2021-07-21 CVE-2021-32775 Information Exposure Through an Error Message vulnerability in Combodo Itop
Combodo iTop is a web based IT Service Management tool.
network
low complexity
combodo CWE-209
6.5
2021-07-21 CVE-2021-21407 Cross-Site Request Forgery (CSRF) vulnerability in Combodo Itop
Combodo iTop is an open source, web based IT Service Management tool.
network
low complexity
combodo CWE-352
6.5