CVE-2025-53111: Improper Access Control

GLPI is a Free Asset and IT Management Software package. In versions 0.80 through 10.0.18, a lack of permission checks can result in unauthorized access to some resources. This is fixed in version 10.0.19...

CVE-2025-53357: Authorization Bypass Through User-Controlled Key

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can alter the reservations of another user. Thi...

CVE-2025-27514

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...

UBUNTU-CVE-2025-27514

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...

CVE-2025-27514 GLPI is susceptible to Stored XSS attack through project's kanban

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...

CVE-2025-27514

GLPI CVE-2025-27514 affects GLPI versions 9.5.0–10.0.18. A malicious payload can trigger a stored XSS on the project’s Kanban, when processed by the application. Root cause described as a stored XSS vulnerability in the Kanban component; exploitation details are not expanded beyond this descripti...

CVE-2025-27514 GLPI is susceptible to Stored XSS attack through project's kanban

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...

CVE-2025-27514

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...

CVE-2025-27514 GLPI is susceptible to Stored XSS attack through project's kanban

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...

PT-2025-31386

Name of the Vulnerable Software and Affected Versions GLPI versions 9.3.1 through 10.0.19 Description GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking, and software auditing. A connected user can utilize a malicious payload to...

PT-2025-31227

Name of the Vulnerable Software and Affected Versions GLPI versions 9.5.0 through 10.0.18 Description GLPI is an Asset and IT Management Software package. A technician can utilize a malicious payload to trigger a stored Cross-Site Scripting XSS issue on the project's kanban. Recommendations Updat...

PT-2025-31385

Name of the Vulnerable Software and Affected Versions GLPI versions 9.1.0 through 10.0.18 Description GLPI is an Asset and IT Management Software package. An unauthenticated user can send a malicious link to attempt a phishing attack from the planning feature. Recommendations Update to version...

PT-2025-31390

Name of the Vulnerable Software and Affected Versions GLPI versions 0.78 through 10.0.18 Description GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.78 through 10.0.18, a connected user can...

PT-2025-31384

Name of the Vulnerable Software and Affected Versions GLPI versions 0.84 through 10.0.18 Description GLPI is an Asset and IT Management Software package. Versions 0.84 through 10.0.18 are susceptible to a Server-Side Request Forgery SSRF exploit when using RSS feeds or external calendars for...

GLPI security vulnerabilities

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

CVE-2025-27514: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...

PT-2025-31388

Name of the Vulnerable Software and Affected Versions GLPI versions 9.1.0 through 10.0.18 Description GLPI is an Asset and IT Management Software package providing ITIL Service Desk features, licenses tracking, and software auditing. A lack of permission checks in affected versions can result in...

PT-2025-31387

Name of the Vulnerable Software and Affected Versions GLPI versions 0.80 through 10.0.18 Description GLPI is an Asset and IT Management Software package. A missing permission check can allow unauthorized access to some resources. Recommendations Update to version 10.0.19 or later...

PT-2025-31389

Name of the Vulnerable Software and Affected Versions GLPI versions 0.65 through 10.0.18 Description GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.65 through 10.0.18, a technician can use th...

ROS-20250722-02

Vulnerabilities in GLPI's asset management and data center software are related to an excessive amount of data output by the application. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain access to potentially sensitive information...