| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2022-39262 | Stored Cross-Site Scripting (XSS) on login page in GLPI | glpi-project | glpi | Medium | 5.2 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39276 | Blind Server-Side Request Forgery (SSRF) in RSS feeds and planning | glpi-project | glpi | Low | 3.5 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39277 | Cross-Site Scripting (XSS) in external links in GLPI | glpi-project | glpi | Medium | 4.5 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39323 | SQL Injection on REST API in GLPI EPSS 0.34 | glpi-project | glpi | High | 7.4 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39370 | Improper access to debug panel in GLPI | glpi-project | glpi | Medium | 4.3 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39371 | Stored Cross-Site Scripting (XSS) through asset inventory in GLPI | glpi-project | glpi | High | 7.5 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39372 | Stored Cross-Site Scripting (XSS) in user information in GLPI | glpi-project | glpi | Low | 3.5 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39373 | Stored Cross-Site Scripting (XSS) in entity name in GLPI | glpi-project | glpi | Medium | 4.9 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39375 | Cross-Site Scripting (XSS) through public RSS feed in GLPI | glpi-project | glpi | Medium | 4.5 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-39376 | Improper input validation on emails links in GLPI | glpi-project | glpi | Low | 2.6 | 2022-11-03 00:00:00 | Deep Dive |
| CVE-2022-31187 | Stored Cross Site Scripting (XSS) through global search in GLPI | glpi-project | glpi | Medium | 6.8 | 2022-09-14 18:00:15 | Deep Dive |
| CVE-2022-35946 | SQL injection through plugin controller in GLPI | glpi-project | glpi | Medium | 5.5 | 2022-09-14 17:55:09 | Deep Dive |
| CVE-2022-35947 | SQL injection in GLPI | glpi-project | glpi | Critical | 10.0 | 2022-09-14 17:50:09 | Deep Dive |
| CVE-2022-36112 | Blind Server-Side Request Forgery (SSRF) in GLPI | glpi-project | glpi | Low | 3.5 | 2022-09-14 17:45:18 | Deep Dive |
| CVE-2022-35945 | Cross site scripting (XSS) via registration API in GLPI | glpi-project | glpi | Medium | 6.3 | 2022-09-14 17:45:12 | Deep Dive |
| CVE-2022-31143 | Leak of sensitive information through login page error in GLPI | glpi-project | glpi | Medium | 5.3 | 2022-09-14 17:40:09 | Deep Dive |
| CVE-2022-31061📌 | SQL injection on login page in GLPI EPSS 0.51 | glpi-project | glpi | Critical | 9.8 | 2022-06-28 17:55:11 | Deep Dive |
| CVE-2022-31068 | Sensitive Data Exposure on Refused Inventory Files in GLPI | glpi-project | glpi | Medium | 5.3 | 2022-06-28 17:50:11 | Deep Dive |
| CVE-2022-31056💣 | SQL injection with _actor parameter in GLPI | glpi-project | glpi | Critical | 9.8 | 2022-06-28 00:00:00 | Deep Dive |
| CVE-2022-31082 | SQL Injection via package deployment tasks in glpi-inventory-plugin | glpi-project | glpi-inventory-plugin | Medium | 5.8 | 2022-06-27 20:30:22 | Deep Dive |