Approved changes feed: RSS · Atom
cpe:2.3:a:combodo:itop:*:*:*:*:-:*:*:*
part: a version: * update: *
| Vendor | Combodo (5f617ad5-36d7-51e9-bc58-49b4ffac8ff9) |
|---|---|
| Product | Itop (03085436-c0ca-5a03-a488-0c01f37a9ca5) |
| Edition | * |
| Language | * |
| Software edition | - |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/combodo/itop |
purl2cpe | 2026-06-01 10:17:55.035980 |
pkg:sourceforge/itop |
purl2cpe | 2026-06-01 10:17:55.035982 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-47123 |
under_investigation | 2026-06-08 06:14:24.004081 |
iTop vulnerable to XSS vulnerability in n:n relations "tagset" widget
HIGH (8.7)
iTop is an IT service management platform. By filling malicious code in an object friendlyname / complementary name, an XSS attack can be performed when this object will displayed as an n:n relation item in another object. This vulnerability is fixed in 3.1.1 and 3.2.0.
Published: 2024-04-15T17:31:21.407Z
Updated: 2024-08-02T21:01:22.830Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32664 |
vulnerable | 2026-06-08 05:32:07.793923 |
Reflected XSS in Combodo/iTop
HIGH (8.1)
Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on "run query" page when logged as administrator. This has been resolved in versions 2.6.5 and 2.7.5.
Published: 2021-10-19T17:45:12.000Z
Updated: 2024-08-03T23:25:31.081Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32663 |
vulnerable | 2026-06-08 05:32:07.793431 |
Unauthorized setup leads to SSRF in Combodo/iTop
HIGH (8.7)
iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authentication. Given specific parameters this can lead to SSRF. This issue has been resolved in versions 2.6.5 and 2.7.5 and later
Published: 2021-10-19T17:40:11.000Z
Updated: 2024-08-03T23:25:31.083Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12779 |
vulnerable | 2026-06-08 05:17:59.128416 |
Combodo iTop - Stored XSS
MEDIUM (6.8)
Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script.
Published: 2020-08-10T02:45:38.893Z
Updated: 2024-09-16T16:27:55.266Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.