agentprime: combodo-itopEvery new CVE for combodo-itop.https://agentprime.io/CVE-2026-108717: Combodo iTop 3.1.0 through 3.3.0 Missing Authorization via LinkSetControllerhttps://agentprime.io/advisories/CVE-2026-108717/https://agentprime.io/advisories/CVE-2026-108717/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 12:19:29 GMTCVECVE-2026-40877: Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferenceshttps://agentprime.io/advisories/CVE-2026-40877/https://agentprime.io/advisories/CVE-2026-40877/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 18:57:55 GMTCVECVE-2026-30864: Combodo iTop: Reflected XSS in dashboard reverthttps://agentprime.io/advisories/CVE-2026-30864/https://agentprime.io/advisories/CVE-2026-30864/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 18:52:43 GMTCVECVE-2026-39975: Combodo iTop: Remote code execution using external auth variable valuehttps://agentprime.io/advisories/CVE-2026-39975/https://agentprime.io/advisories/CVE-2026-39975/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 18:50:48 GMTCVEcriticalCVE-2026-34949: Combodo iTop: Unauthenticated user can delete .readonly filehttps://agentprime.io/advisories/CVE-2026-34949/https://agentprime.io/advisories/CVE-2026-34949/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 22:31:49 GMTCVECVE-2026-34948: Combodo iTop: Access control bypass via OQL joinshttps://agentprime.io/advisories/CVE-2026-34948/https://agentprime.io/advisories/CVE-2026-34948/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 22:26:22 GMTCVECVE-2026-34836: Combodo iTop: Improper access control in ajax.render.php and ajax.document.phphttps://agentprime.io/advisories/CVE-2026-34836/https://agentprime.io/advisories/CVE-2026-34836/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 21:54:45 GMTCVECVE-2026-34741: Combodo iTop: Authentication bypass in exec.php allows PHP file executionhttps://agentprime.io/advisories/CVE-2026-34741/https://agentprime.io/advisories/CVE-2026-34741/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 21:50:49 GMTCVECVE-2026-33333: Combodo iTop: Information disclosure in ajax.render.phphttps://agentprime.io/advisories/CVE-2026-33333/https://agentprime.io/advisories/CVE-2026-33333/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 21:46:00 GMTCVECVE-2026-33240: Combodo iTop: Reflected XSS in foreign key search criteriahttps://agentprime.io/advisories/CVE-2026-33240/https://agentprime.io/advisories/CVE-2026-33240/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 21:25:03 GMTCVECVE-2026-33047: Combodo iTop: Object can be locked by a user without write permissionshttps://agentprime.io/advisories/CVE-2026-33047/https://agentprime.io/advisories/CVE-2026-33047/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 21:21:53 GMTCVECVE-2026-31936: Combodo iTop: Unauthorized access to object information via search operationhttps://agentprime.io/advisories/CVE-2026-31936/https://agentprime.io/advisories/CVE-2026-31936/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 21:17:44 GMTCVECVE-2026-31880: Combodo iTop: Reflected XSS in universal searchhttps://agentprime.io/advisories/CVE-2026-31880/https://agentprime.io/advisories/CVE-2026-31880/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 20:59:35 GMTCVECVE-2026-31803: Combodo iTop: Reflected XSS in tag adminhttps://agentprime.io/advisories/CVE-2026-31803/https://agentprime.io/advisories/CVE-2026-31803/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 20:52:09 GMTCVECVE-2026-30890: Combodo iTop: Reflected XSS in synchro/synchro_import.phphttps://agentprime.io/advisories/CVE-2026-30890/https://agentprime.io/advisories/CVE-2026-30890/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 20:40:05 GMTCVECVE-2026-30865: Combodo iTop: Reflected XSS in dashboard savehttps://agentprime.io/advisories/CVE-2026-30865/https://agentprime.io/advisories/CVE-2026-30865/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 20:37:20 GMTCVECVE-2026-30826: Combodo iTop: Reflected XSS in run_query.phphttps://agentprime.io/advisories/CVE-2026-30826/https://agentprime.io/advisories/CVE-2026-30826/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 20:15:42 GMTCVECVE-2026-30819: Combodo iTop: Reflected XSS in /pages/ajax.render.php dashboard_id parameterhttps://agentprime.io/advisories/CVE-2026-30819/https://agentprime.io/advisories/CVE-2026-30819/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 20:05:47 GMTCVECVE-2026-27490: Combodo iTop: Weak secret generation for inline imagehttps://agentprime.io/advisories/CVE-2026-27490/https://agentprime.io/advisories/CVE-2026-27490/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:59:29 GMTCVECVE-2026-27463: Combodo iTop: Version disclosure via login page logohttps://agentprime.io/advisories/CVE-2026-27463/https://agentprime.io/advisories/CVE-2026-27463/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:57:40 GMTCVECVE-2026-27462: Combodo iTop: User enumeration via password resethttps://agentprime.io/advisories/CVE-2026-27462/https://agentprime.io/advisories/CVE-2026-27462/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:52:04 GMTCVECVE-2026-30866: Combodo iTop: Insecured access to uploaded images via sniffed urlhttps://agentprime.io/advisories/CVE-2026-30866/https://agentprime.io/advisories/CVE-2026-30866/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 19:32:00 GMTCVECVE-2025-64167: Combodo iTop vulnerable to reflected XSS in webservices/export.phphttps://agentprime.io/advisories/CVE-2025-64167/https://agentprime.io/advisories/CVE-2025-64167/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 21:15:11 GMTCVECVE-2025-49145: iTop admin can drop iTop database using webhookshttps://agentprime.io/advisories/CVE-2025-49145/https://agentprime.io/advisories/CVE-2025-49145/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 21:10:19 GMTCVECVE-2025-48878: Combodo iTop vulnerable to IDOR with ModuleInstallation objecthttps://agentprime.io/advisories/CVE-2025-48878/https://agentprime.io/advisories/CVE-2025-48878/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 20:43:04 GMTCVECVE-2025-48065: Combodo iTop vulnerable to reflected XSS via objection edition form errorhttps://agentprime.io/advisories/CVE-2025-48065/https://agentprime.io/advisories/CVE-2025-48065/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 20:35:34 GMTCVECVE-2025-48055: Combodo iTop has stored XSS in user portal's browse brickhttps://agentprime.io/advisories/CVE-2025-48055/https://agentprime.io/advisories/CVE-2025-48055/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 20:33:48 GMTCVECVE-2025-47932: Combodo iTop vulnerable to reflected XSS in ajax.render.php render_dashboardhttps://agentprime.io/advisories/CVE-2025-47932/https://agentprime.io/advisories/CVE-2025-47932/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 19:20:24 GMTCVECVE-2025-47773: Combodo iTop has XSS vulnerability in /pages/ajax.render.phphttps://agentprime.io/advisories/CVE-2025-47773/https://agentprime.io/advisories/CVE-2025-47773/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 19:13:09 GMTCVECVE-2025-47286: Combodo iTop vulnerable to Remote Code Execution in the backup creation functionalityhttps://agentprime.io/advisories/CVE-2025-47286/https://agentprime.io/advisories/CVE-2025-47286/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 18:38:40 GMTCVECVE-2025-24969: iTop portal user can see any other contact's picturehttps://agentprime.io/advisories/CVE-2025-24969/https://agentprime.io/advisories/CVE-2025-24969/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 May 2025 15:11:45 GMTCVECVE-2025-24785: iTop dashboard vulnerable to denial of servicehttps://agentprime.io/advisories/CVE-2025-24785/https://agentprime.io/advisories/CVE-2025-24785/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 May 2025 15:05:28 GMTCVECVE-2025-24026: iTop Inefficient Regular Expression Complexity vulnerabilityhttps://agentprime.io/advisories/CVE-2025-24026/https://agentprime.io/advisories/CVE-2025-24026/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 May 2025 14:59:47 GMTCVECVE-2025-24022: iTop server vulnerable to portal code injectionhttps://agentprime.io/advisories/CVE-2025-24022/https://agentprime.io/advisories/CVE-2025-24022/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 May 2025 14:57:37 GMTCVECVE-2025-24021: iTop doesn't have mass assignment of fields in the portal formhttps://agentprime.io/advisories/CVE-2025-24021/https://agentprime.io/advisories/CVE-2025-24021/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 May 2025 14:48:42 GMTCVECVE-2024-56157: iTop vulnerable to Self XSS in CSV Importhttps://agentprime.io/advisories/CVE-2024-56157/https://agentprime.io/advisories/CVE-2024-56157/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 May 2025 14:40:46 GMTCVECVE-2024-52601: iTop portal Insecure Direct Object Reference vulnerabilityhttps://agentprime.io/advisories/CVE-2024-52601/https://agentprime.io/advisories/CVE-2024-52601/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 May 2025 14:39:15 GMTCVECVE-2025-27139: Combodo iTop vulnerable to stored self Cross-site Scripting in preferenceshttps://agentprime.io/advisories/CVE-2025-27139/https://agentprime.io/advisories/CVE-2025-27139/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 19:52:15 GMTCVECVE-2024-54139: Combodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameterhttps://agentprime.io/advisories/CVE-2024-54139/https://agentprime.io/advisories/CVE-2024-54139/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Dec 2024 15:59:24 GMTCVECVE-2024-52000: Reflected Cross-site Scripting exploit in Combodo iTophttps://agentprime.io/advisories/CVE-2024-52000/https://agentprime.io/advisories/CVE-2024-52000/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Nov 2024 22:20:02 GMTCVECVE-2024-52001: Portal user is able to access forbidden services information in Combodo iTophttps://agentprime.io/advisories/CVE-2024-52001/https://agentprime.io/advisories/CVE-2024-52001/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Nov 2024 22:18:17 GMTCVECVE-2024-52002: Cross-Site Request Forgery (CSRF) in several iTop pageshttps://agentprime.io/advisories/CVE-2024-52002/https://agentprime.io/advisories/CVE-2024-52002/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Nov 2024 22:16:35 GMTCVECVE-2024-51993: Password is stored in clear in the database in Combodo iTophttps://agentprime.io/advisories/CVE-2024-51993/https://agentprime.io/advisories/CVE-2024-51993/CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Nov 2024 17:59:18 GMTCVECVE-2024-51994: Cross-site Scripting in portal picture upload in Combodo iTophttps://agentprime.io/advisories/CVE-2024-51994/https://agentprime.io/advisories/CVE-2024-51994/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Nov 2024 17:57:54 GMTCVECVE-2024-51995: Logic bug in ajax.render.php allows for bypass of 'backOffice' access control in Combodo iTophttps://agentprime.io/advisories/CVE-2024-51995/https://agentprime.io/advisories/CVE-2024-51995/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Nov 2024 17:55:15 GMTCVECVE-2024-51740: SSRF through arbitrary PHP class instantiation in the user portal in Combodo iTophttps://agentprime.io/advisories/CVE-2024-51740/https://agentprime.io/advisories/CVE-2024-51740/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 18:13:05 GMTCVECVE-2024-51739: Users enumeration allowed through Rest API in Combodo iTophttps://agentprime.io/advisories/CVE-2024-51739/https://agentprime.io/advisories/CVE-2024-51739/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 18:11:37 GMTCVECVE-2024-32870: iTop hub connector Information disclosurehttps://agentprime.io/advisories/CVE-2024-32870/https://agentprime.io/advisories/CVE-2024-32870/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Nov 2024 23:36:46 GMTCVECVE-2024-31998: CSRF security issue on CSV import in Combodo iTophttps://agentprime.io/advisories/CVE-2024-31998/https://agentprime.io/advisories/CVE-2024-31998/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Nov 2024 23:35:22 GMTCVECVE-2024-31448: Cross-site Scripting vulnerability in link CSV import in Combodo iTophttps://agentprime.io/advisories/CVE-2024-31448/https://agentprime.io/advisories/CVE-2024-31448/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 Nov 2024 23:34:19 GMTCVE