glpi
- Software type
- Business application
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, glpi recorded 19 security vulnerabilities in the last 90 days, of which 12 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of glpi and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2023-41323Users login enumeration by unauthenticated user in GLPICVE-2023-41322Privilege Escalation from technician to super-admin in GLPICVE-2023-41321Sensitive fields enumeration through API in GLPICVE-2023-41320Account takeover via SQL Injection in UI layout preferences in GLPICVE-2023-37278GLPI vulnerable to SQL injection via dashboard administration| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2023-41323Users login enumeration by unauthenticated user in GLPI | Exploitation statusNot exploited | FixNo |
| SeverityMedium |
CVE-2023-41322Privilege Escalation from technician to super-admin in GLPI | Exploitation statusNot exploited | FixNo | Published09/26/2023 | SeverityMedium |
|---|
CVE-2023-41321Sensitive fields enumeration through API in GLPI | Exploitation statusNot exploited | FixNo | Published09/26/2023 | SeverityMedium |
|---|
CVE-2023-41320Account takeover via SQL Injection in UI layout preferences in GLPI | Exploitation statusNot exploited | FixNo | Published09/26/2023 | SeverityHigh |
|---|
CVE-2023-37278GLPI vulnerable to SQL injection via dashboard administration | Exploitation statusNot exploited | FixYes | Published07/13/2023 | SeverityMedium |
|---|
CVE-2023-36808GLPI vulnerable to SQL injection through Computer Virtual Machine information | Exploitation statusNot exploited | FixNo | Published07/05/2023 | SeverityHigh |
|---|
CVE-2023-35940GLPI vulnerable to unauthenticated access to Dashboard data | Exploitation statusNot exploited | FixNo | Published07/05/2023 | SeverityHigh |
|---|
CVE-2023-35939GLPI vulnerable to unauthorized access to Dashboard data | Exploitation statusNot exploited | FixNo | Published07/05/2023 | SeverityHigh |
|---|
CVE-2023-35924GLPI vulnerable to SQL injection via inventory agent request | Exploitation statusNot exploited | FixNo | Published07/05/2023 | SeverityHigh |
|---|
CVE-2023-34244GLPI vulnerable to reflected XSS in search pages | Exploitation statusNot exploited | FixNo | Published07/05/2023 | SeverityMedium |
|---|
CVE-2023-34107GLPI vulnerable to unauthorized access to KnowbaseItem data | Exploitation statusNot exploited | FixNo | Published07/05/2023 | SeverityMedium |
|---|
CVE-2023-34106GLPI vulnerable to unauthorized access to User data | Exploitation statusNot exploited | FixNo | Published07/05/2023 | SeverityMedium |
|---|
CVE-2023-28852GLPI vulnerable to stored Cross-site Scripting through dashboard administration | Exploitation statusNot exploited | FixNo | Published04/05/2023 | SeverityMedium |
|---|
CVE-2023-28849GLPI vulnerable to SQL injection and Stored XSS via inventory agent request | Exploitation statusNot exploited | FixNo | Published04/05/2023 | SeverityCritical |
|---|
CVE-2023-28838GLPI vulnerable to SQL injection through dynamic reports | Exploitation statusNot exploited | FixNo | Published04/05/2023 | SeverityCritical |
|---|
CVE-2023-28636GLPI vulnerable to stored Cross-site Scripting in external links | Exploitation statusNot exploited | FixYes | Published04/05/2023 | SeverityMedium |
|---|
CVE-2023-28634GLPI vulnerable to Privilege Escalation from Technician to Super-Admin | Exploitation statusNot exploited | FixNo | Published04/05/2023 | SeverityHigh |
|---|
117 Results | Page 3 of 3