PH
Product
phpipam
60
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 8High 10Medium 38Low 3
Watch
Add phpipam to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-4189 | 4.7 | Mar 15 | phpipam Section edit-result.php sql injection Affected: 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4 |
| CVE-2024-55093 | 4.7 | Mar 31 | phpIPAM through 1.7.3 has a reflected Cross-Site Scripting (XSS) vulnerability in the install scripts Affected: through 1.7.3 |
| CVE-2024-41356 | 4.7 | Jul 26 | phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\firewall-zones\zones-edit-network.php Affected: 1.6 |
| CVE-2018-1000860 | 4.7 | Dec 20 | phpipam version 1.3.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in The value of the phpipamredirect cookie is copied into an HTML tag on the login page… Affected: through 1.3.2 |
| CVE-2026-115982 New | 4.3 | Oct 24 | phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting Affected: 1.8.0; 1.8.1; 1.8.2; 1.8.3 |
| CVE-2026-108720 | 4.3 | Oct 11 | phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages Affected: through 1.8.3 |
| CVE-2025-60912 | 3.3 | Dec 8 | phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality Affected: through 1.7.3 |
| CVE-2026-115981 New | 2.4 | Oct 24 | phpIPAM index.php cross site scripting Affected: 1.8.0; 1.8.1; 1.8.2; 1.8.3 |
| CVE-2026-12194 | 2.3 | Jul 4 | PHPIPAM Authenticated LFI Affected: 0 |
| CVE-2015-6529 | – | Aug 20 | Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (1) section parameter to… Affected: 1.1.010 |