Page 4 of 33 results (0.005 seconds)

CVSS: 9.6EPSS: 2%CPEs: 2EXPL: 0

CVE-2022-39214 – Authenticated users of Combodo iTop can take over any account

https://notcve.org/view.php?id=CVE-2022-39214

14 Mar 2023 — Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1. • https://github.com/Combodo/iTop/commit/4c1df9927d1dc6b0181ee20721f93346def026fd • CWE-863: Incorrect Authorization •

CVSS: 6.1EPSS: 1%CPEs: 1EXPL: 2

CVE-2022-31403

https://notcve.org/view.php?id=CVE-2022-31403

14 Jun 2022 — ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php. Se ha detectado que ITOP versión v3.0.1, contiene una vulnerabilidad de tipo cross-site scripting (XSS) por medio del archivo /itop/pages/ajax.render.php • https://github.com/IbrahimEkimIsik/CVE-2022-31403 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 10%CPEs: 1EXPL: 2

CVE-2022-31402

https://notcve.org/view.php?id=CVE-2022-31402

10 Jun 2022 — ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php. Se ha detectado que ITOP versión v3.0.1 contiene una vulnerabilidad de tipo cross-site scripting (XSS) por medio del archivo /itop/webservices/export-v2.php • https://github.com/YavuzSahbaz/CVE-2022-31402 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •