Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/01/16 4:20 p.m.3 views

CVE-2025-64516

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item ticket, asset, .... If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed i...

7.5CVSS6.7AI score0.00045EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2026/01/15 4:16 p.m.1 views

CVE-2025-64516

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item ticket, asset, .... If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed i...

7.5CVSS5.8AI score0.00045EPSS
Exploits1References6
OSV
OSV
added 2026/01/15 4:1 p.m.3 views

CVE-2025-64516 GLPI incorrectly authorizes access to documents

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item ticket, asset, .... If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed i...

7.5CVSS6.6AI score0.00045EPSS
Exploits1References7
EUVD
EUVD
added 2026/01/15 4:1 p.m.2 views

EUVD-2025-206294

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item ticket, asset, .... If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed i...

7.5CVSS6.2AI score0.00045EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/15 4:1 p.m.24 views

CVE-2025-64516 GLPI incorrectly authorizes access to documents

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item ticket, asset, .... If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed i...

7.5CVSS0.00045EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/15 4:1 p.m.2 views

CVE-2025-64516

GLPI is a free asset and IT management software package. Prior to 10.0.21 and 11.0.3, an unauthorized user can access GLPI documents attached to any item ticket, asset, .... If the public FAQ is enabled, this unauthorized access can be performed by an anonymous user. This vulnerability is fixed i...

7.5CVSS5.5AI score0.00045EPSS
Exploits1References6Affected Software1
Rows per page
Query Builder