Combodo iTop (aka IT Operations Portal) 3.2.0 Release Candidate 2
Approved changes feed: RSS · Atom
cpe:2.3:a:combodo:itop:3.2.0:rc2:*:*:*:*:*:*
part: a version: 3.2.0 update: rc2
| Vendor | Combodo (5f617ad5-36d7-51e9-bc58-49b4ffac8ff9) |
|---|---|
| Product | Itop (03085436-c0ca-5a03-a488-0c01f37a9ca5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/combodo/itop |
purl2cpe | 2026-06-01 10:17:55.036331 |
pkg:sourceforge/itop |
purl2cpe | 2026-06-01 10:17:55.036333 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27139 |
vulnerable | 2026-06-08 07:14:54.204690 |
Combodo iTop vulnerable to stored self Cross-site Scripting in preferences
MEDIUM (6.8)
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cross-site scripting when the preferences page is opened. Versions 2.7.12, 3.1.2, and 3.2.0 fix the issue.
Published: 2025-02-25T19:52:15.589Z
Updated: 2025-02-25T20:07:39.635Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54139 |
vulnerable | 2026-06-08 06:54:16.103498 |
Combodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter
HIGH (7.9)
Combodo iTop is an open source and web-based IT service management platform. Prior to versions 2.7.11, 3.1.2, and 3.2.0., iTop has a cross-site scripting vulnerability that can lead to cross-site request forgery on the `_table_id` parameter. Versions 2.7.11, 3.1.2, and 3.2.0 contain a patch for the issue.
Published: 2024-12-13T15:59:24.978Z
Updated: 2024-12-13T17:34:07.288Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.