Combodo vulnerabilities
88 CVEs and advisories name Combodo as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-43790iTop vulnerable to XSS in friendlyname in object details
- CVE-2023-38511iTop Dashboard editor vulnerable dashboard config file parameter
- CVE-2023-34447iTop XSS vulnerability on pages/UI.php
- CVE-2023-34446iTop XSS vulnerability on pages/preferences.php
- CVE-2022-39216Combodo iTop's weak password reset token leads to account takeover
- CVE-2022-39214Authenticated users of Combodo iTop can take over any account
- CVE-2021-41162Cross-site Scripting in Combodo iTop
- CVE-2022-24870Stored Cross-site Scripting in Combodo iTop
- CVE-2021-41161XSS in csvimport in 3.0.0-beta versions
- CVE-2022-24811Cross-site Scripting in Combodo iTop
- CVE-2022-24780Code Injection in Combodo iTop
- CVE-2021-41245Possible Cross-Site Request Forgery in Combodo iTop
- CVE-2021-32664Reflected XSS in Combodo/iTop
- CVE-2021-32663Unauthorized setup leads to SSRF in Combodo/iTop
- CVE-2021-32776No CSRF form token cleanup on Windows servers
- CVE-2021-32775Any user can see any fields (including mailbox password) with GroupBy Dashlet
- CVE-2021-21407Portal : the CSRF token isn't validated
- CVE-2021-21406Command Injection vulnerability in the Setup Wizard
- CVE-2020-15221XSS in the breadcrumbs
- CVE-2020-15220Session fixation
- CVE-2020-15219SQL query displayed on portal error
- CVE-2020-15218Admin pages are cached and can be embedded
- CVE-2020-4079Information disclosure vulnerability in iTop
- CVE-2020-12781Combodo iTop - CSRF
- CVE-2020-12780Combodo iTop - Security Misconfiguration
- CVE-2020-12779Combodo iTop - Stored XSS
- CVE-2020-12778Combodo iTop - Reflected XSS
- CVE-2020-12777Combodo iTop - Broken Access Control