PH
Product
phpipam
by phpipam · last CVE Oct 24, 2026
60
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 8High 10Medium 38Low 3
Watch

Add phpipam to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-41443
9.8
1%
Oct 3
phpipam v1.5.0 was discovered to contain a header injection vulnerability via the component /admin/subnets/ripe-query.php
Affected: 1.5.0
CVE-2019-16696
9.8
2%
Sep 22
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used
Affected: through 1.4
CVE-2019-16695
9.8
2%
Sep 22
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used
Affected: through 1.4
CVE-2019-16694
9.8
2%
Sep 22
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used
Affected: through 1.4
CVE-2019-16693
9.8
4%
Sep 22
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used
Affected: through 1.4
CVE-2019-16692
9.8
10%
Sep 22
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used
Affected: through 1.4
CVE-2018-1000869
9.8
2%
Dec 20
phpIPAM version 1.3.2 contains a CWE-89 vulnerability in /app/admin/nat/item-add-submit.php that can result in SQL Injection
Affected: 1.3.2
CVE-2026-67602
9.1
1%
Aug 24
phpIPAM < 1.8.2 Authentication Bypass via REST API Object Cache
Affected: before 1.8.2
Showing 8