Approved changes feed: RSS · Atom
cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Combodo (5f617ad5-36d7-51e9-bc58-49b4ffac8ff9) |
|---|---|
| Product | Itop (03085436-c0ca-5a03-a488-0c01f37a9ca5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/combodo/itop |
purl2cpe | 2026-06-01 10:17:55.029136 |
pkg:sourceforge/itop |
purl2cpe | 2026-06-01 10:17:55.029138 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64167 |
vulnerable | 2026-06-08 07:39:18.167375 |
Combodo iTop vulnerable to reflected XSS in webservices/export.php
HIGH (7.1)
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to a cross-site scripting attack (leading to JS execution) when editing the URL parameter. Versions 2.7.13 and 3.2.2 don't use export.php, which was deprecated. They use export-v2.php instead.
Published: 2025-11-10T21:15:11.632Z
Updated: 2025-11-10T21:43:14.849Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49145 |
vulnerable | 2026-06-08 07:29:12.628899 |
iTop admin can drop iTop database using webhooks
HIGH (8.7)
Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, a user that has enough rights to create webhooks (mostly administrators) can drop the database. This is fixed in iTop 2.7.13 and 3.2.2 by verifying callback signature.
Published: 2025-11-10T21:10:19.742Z
Updated: 2025-11-10T21:42:53.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48878 |
vulnerable | 2026-06-08 07:29:12.148885 |
Combodo iTop vulnerable to IDOR with ModuleInstallation object
MEDIUM (4.3)
Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user (e.g. with Service desk agent profile) to create a ModuleInstallation object when they shouldn't be able to do so. Version 3.2.2 fixes the issue.
Published: 2025-11-10T20:43:04.366Z
Updated: 2025-11-10T20:58:47.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48065 |
vulnerable | 2026-06-08 07:27:15.437370 |
Combodo iTop vulnerable to reflected XSS via objection edition form error
HIGH (8.8)
Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a field with an error contains malicious content. Versions 2.7.13 and 3.2.2 protect rendered HTML content.
Published: 2025-11-10T20:35:34.054Z
Updated: 2025-11-10T20:58:59.754Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48055 |
vulnerable | 2026-06-08 07:27:15.424891 |
Combodo iTop has stored XSS in user portal's browse brick
HIGH (8.5)
Combodo iTop is a web based IT service management tool. In versions prior to 3.2.2, when displaying content in a browse brick in the user portal, a cross-site scripting attack can occur. This is fixed in versions 3.2.2 and 3.3.0.
Published: 2025-11-10T20:33:48.310Z
Updated: 2025-11-10T20:45:35.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47932 |
vulnerable | 2026-06-08 07:27:15.084954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47773 |
vulnerable | 2026-06-08 07:27:14.807446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47286 |
vulnerable | 2026-06-08 07:27:09.897563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27139 |
vulnerable | 2026-06-08 07:14:54.201389 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24969 |
vulnerable | 2026-06-08 07:12:50.221906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24785 |
vulnerable | 2026-06-08 07:12:49.886162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24026 |
vulnerable | 2026-06-08 07:12:47.640176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24022 |
vulnerable | 2026-06-08 07:12:47.352662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24021 |
vulnerable | 2026-06-08 07:12:47.352306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56157 |
vulnerable | 2026-06-08 06:54:17.463616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-54139 |
vulnerable | 2026-06-08 06:54:16.100127 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52601 |
vulnerable | 2026-06-08 06:52:16.148925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52002 |
vulnerable | 2026-06-08 06:52:14.564912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52001 |
vulnerable | 2026-06-08 06:52:14.564502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52000 |
vulnerable | 2026-06-08 06:52:14.564071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51995 |
vulnerable | 2026-06-08 06:52:14.560065 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51994 |
vulnerable | 2026-06-08 06:52:14.559660 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51993 |
vulnerable | 2026-06-08 06:52:14.559223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51740 |
vulnerable | 2026-06-08 06:52:12.756635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-51739 |
vulnerable | 2026-06-08 06:52:12.756133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32870 |
vulnerable | 2026-06-08 06:37:24.614067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31998 |
vulnerable | 2026-06-08 06:35:32.582878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31448 |
vulnerable | 2026-06-08 06:35:31.542670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48710 |
vulnerable | 2026-06-08 06:14:27.930523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48709 |
vulnerable | 2026-06-08 06:14:27.930129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47626 |
vulnerable | 2026-06-08 06:14:25.261520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47622 |
vulnerable | 2026-06-08 06:14:25.255356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47123 |
vulnerable | 2026-06-08 06:14:24.016390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45808 |
vulnerable | 2026-06-08 06:12:43.373000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44396 |
vulnerable | 2026-06-08 06:12:40.910283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43790 |
vulnerable | 2026-06-08 06:12:38.016822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38511 |
vulnerable | 2026-06-08 06:08:18.133068 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34447 |
vulnerable | 2026-06-08 06:06:25.628137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34446 |
vulnerable | 2026-06-08 06:06:25.625925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34445 |
vulnerable | 2026-06-08 06:06:25.625548 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34444 |
vulnerable | 2026-06-08 06:06:25.625027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34443 |
vulnerable | 2026-06-08 06:06:25.624458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39216 |
vulnerable | 2026-06-08 05:47:18.361730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39214 |
vulnerable | 2026-06-08 05:47:18.359296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24870 |
vulnerable | 2026-06-08 05:41:44.799291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24811 |
vulnerable | 2026-06-08 05:41:01.749163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24780 |
vulnerable | 2026-06-08 05:41:01.613355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41245 |
vulnerable | 2026-06-08 05:35:20.041475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41162 |
vulnerable | 2026-06-08 05:35:19.856157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41161 |
vulnerable | 2026-06-08 05:35:19.851905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32776 |
vulnerable | 2026-06-08 05:32:08.018048 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32775 |
vulnerable | 2026-06-08 05:32:08.014967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32664 |
vulnerable | 2026-06-08 05:32:07.793885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32663 |
vulnerable | 2026-06-08 05:32:07.792823 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21407 |
vulnerable | 2026-06-08 05:29:11.958675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21406 |
vulnerable | 2026-06-08 05:29:11.956196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4079 |
vulnerable | 2026-06-08 05:25:58.834900 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15221 |
vulnerable | 2026-06-08 05:19:25.534582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15220 |
vulnerable | 2026-06-08 05:19:25.534248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15219 |
vulnerable | 2026-06-08 05:19:25.533859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15218 |
vulnerable | 2026-06-08 05:19:25.532532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12781 |
vulnerable | 2026-06-08 05:17:59.130503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12780 |
vulnerable | 2026-06-08 05:17:59.129937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12779 |
vulnerable | 2026-06-08 05:17:59.125970 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12778 |
vulnerable | 2026-06-08 05:17:59.125028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12777 |
vulnerable | 2026-06-08 05:17:59.113144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19821 |
vulnerable | 2026-06-08 05:13:23.786766 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13966 |
vulnerable | 2026-06-08 05:12:52.885959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13965 |
vulnerable | 2026-06-08 05:12:52.885428 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11215 |
vulnerable | 2026-06-08 05:12:36.661467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10642 |
vulnerable | 2026-06-08 05:10:35.277328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6544 |
vulnerable | 2026-06-08 05:06:52.665688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.