Itop@* Security Vulnerabilities and Issues — Itop@* CVE List

Lucene search

CombodoItop*

4 matches found

CVE•added 2023/10/25 6:17 p.m.•57 views

CVE-2023-34447

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.

8.8CVSS6.9AI score0.01181EPSS

CVE•added 2023/03/14 4:15 p.m.•44 views

CVE-2022-39214

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1.

9.6CVSS7.6AI score0.02152EPSS

CVE•added 2023/03/14 4:15 p.m.•40 views

CVE-2022-39216

Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without any randomness parameter. This may lead to account takeover. The issue is fixed in versions 2.7.8 and 3.0.2-1.

9.8CVSS8.4AI score0.0023EPSS

CVE•added 2023/10/25 6:17 p.m.•25 views

CVE-2023-34446

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, when displaying pages/preferences.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.

8.8CVSS6.9AI score0.0078EPSS