Glpi Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

10.0.063
10.0.163
10.0.261
10.0.354
10.0.443

Przeciwdziałanie

Official Fix129
Temporary Fix0
Workaround1
Unavailable0
Not Defined10

Wykorzystywanie

High1
Functional0
Proof-of-Concept9
Unproven0
Not Defined130

Wektor dostępu

Not Defined0
Physical0
Local2
Adjacent6
Network132

Uwierzytelnianie

Not Defined0
High21
Low73
None46

Interakcja z użytkownikiem

Not Defined0
Required45
None95

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤30
≤411
≤530
≤633
≤730
≤821
≤914
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤414
≤531
≤640
≤725
≤818
≤911
≤101

VulDB

≤10
≤21
≤314
≤424
≤536
≤617
≤727
≤818
≤92
≤101

NVD

≤10
≤20
≤30
≤41
≤514
≤615
≤715
≤813
≤911
≤1019

CNA

≤10
≤20
≤31
≤44
≤512
≤611
≤721
≤810
≤912
≤106

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤90
≤100

Exploit 0-day

<1k35
<2k84
<5k21
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k139
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (200): 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13, 0.14, 0.15, 0.16, 0.17, 0.18, 0.19, 0.20, 0.21, 0.22, 0.23, 0.24, 0.25, 0.26, 0.27, 0.28, 0.29, 0.30, 0.31, 0.32, 0.33, 0.34, 0.35, 0.36, 0.37, 0.38, 0.39, 0.40, 0.41, 0.42, 0.43, 0.44, 0.45, 0.46, 0.47, 0.48, 0.49, 0.50, 0.51, 0.51a, 0.52, 0.53, 0.54, 0.55, 0.56, 0.57, 0.58, 0.59, 0.60, 0.61, 0.62, 0.63, 0.64, 0.65, 0.66, 0.67, 0.68, 0.68.1, 0.68.2, 0.68.3, 0.69, 0.70, 0.70.1, 0.70.2, 0.71, 0.71.1, 0.71.2, 0.71.3, 0.71.4, 0.71.5, 0.71.6, 0.72, 0.72.1, 0.72.2, 0.72.3, 0.72.4, 0.73, 0.74, 0.75, 0.76, 0.77, 0.78, 0.78.1, 0.78.2, 0.78.3, 0.78.4, 0.78.5, 0.79, 0.80, 0.80.1, 0.80.2, 0.80.3, 0.80.4, 0.80.5, 0.80.6, 0.80.61, 0.81, 0.82, 0.83, 0.83.1, 0.83.2, 0.83.3, 0.83.4, 0.83.5, 0.83.6, 0.83.7, 0.83.8, 0.83.31, 0.84, 0.84.1, 0.84.2, 0.84.3, 0.84.4, 0.84.5, 0.84.6, 0.84.7, 0.85, 0.85.1, 0.85.2, 0.90.4, 1, 1.0, 1.0.1, 1.1, 1.2, 1.3, 1.4, 2.0, 2.1, 2.2, 2.3, 2.4, 2.5, 2.6, 2.7, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.8, 2.9, 2.10, 9.0, 9.1, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.2, 9.2.1, 9.3, 9.3.1, 9.3.2, 9.3.3, 9.4, 9.4.1, 9.4.2, 9.4.3, 9.4.4, 9.4.5, 9.5, 9.5.1, 9.5.2, 9.5.3, 9.5.4, 9.5.5, 9.5.6, 9.5.7, 9.5.8, 9.5.9, 9.5.11, 9.5.12, 9.5.13, 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9, 10.0.11, 10.0.12

Typ oprogramowania: Asset Management Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-04-146.36.1GLPI Shell Commands Plugin privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.30CVE-2024-31705
2024-03-184.84.7GLPI Debug Bar cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-27914
2024-03-183.43.4GLPI Dashboard cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.06CVE-2024-27104
2024-03-186.36.2GLPI privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-27098
2024-03-187.06.8GLPI Search Engine sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-27096
2024-03-185.45.3GLPI privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-27930
2024-03-185.45.3GLPI privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-27937
2024-03-154.34.3GLPI information disclosure$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2024-27756
2024-02-015.65.6GLPI Report Page cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-23645
2024-02-015.95.9GLPI privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-51446
2023-12-138.68.5GLPI sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-46727
2023-12-137.27.1GLPI sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-43813
2023-12-138.18.0GLPI LDAP Server Configuration privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-46726
2023-11-029.99.7GLPI ajax privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-42802
2023-09-277.77.6GLPI Kanban privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-41326
2023-09-277.47.3GLPI Document Upload Process directory traversal$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-42462
2023-09-277.06.9GLPI sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-42461
2023-09-275.35.2GLPI information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41323
2023-09-275.55.4GLPI privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-41322
2023-09-278.18.0GLPI UI Layout Preferences Management sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-41320
2023-09-274.64.6GLPI URL directory traversal$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41888
2023-09-277.77.6GLPI privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41324
2023-09-274.74.7GLPI API information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41321
2023-07-146.96.8GLPI Admin Dashboard sql injection$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-37278
2023-07-065.65.6GLPI Link cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-34244

115 więcej wpisów nie jest pokazywanych

Might our Artificial Intelligence support you?

Check our Alexa App!