VendorsCombodoitop3.0.0
Vulnerabilities

Combodo iTop (aka IT Operations Portal) 3.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2021-41161
XSS in csvimport in 3.0.0-beta versions
Published 2022-04-21 · Modified
9.3EPSS 0.007
CVE-2021-41162
Cross-site Scripting in Combodo iTop
Published 2022-04-21 · Modified
9.3EPSS 0.007
CVE-2022-24780
Code Injection in Combodo iTop
Published 2022-04-05 · Modified
8.8EPSS 0.057
CVE-2020-12781
Combodo iTop - CSRF
Published 2020-08-10 · Modified
8.8EPSS 0.005
CVE-2021-32776
No CSRF form token cleanup on Windows servers
Published 2021-07-21 · Modified
8.8EPSS 0.004
CVE-2022-24870
Stored Cross-site Scripting in Combodo iTop
Published 2022-04-21 · Modified
8.7EPSS 0.009
CVE-2021-32775
Any user can see any fields (including mailbox password) with GroupBy Dashlet
Published 2021-07-21 · Modified
7.7EPSS 0.008
CVE-2020-12777
Combodo iTop - Broken Access Control
Published 2020-08-10 · Modified
7.5EPSS 0.013
CVE-2020-12778
Combodo iTop - Reflected XSS
Published 2020-08-10 · Modified
7.4EPSS 0.008
CVE-2020-15218
Admin pages are cached and can be embedded
Published 2021-01-13 · Modified
6.8EPSS 0.008
CVE-2020-15221
XSS in the breadcrumbs
Published 2021-01-13 · Modified
6.8EPSS 0.006
CVE-2020-15220
Session fixation
Published 2021-01-13 · Modified
6.1EPSS 0.007
CVE-2020-15219
SQL query displayed on portal error
Published 2021-01-13 · Modified
4.3EPSS 0.007