Login Request a demo
PH
Product
phpipam
by phpipam · last CVE Oct 24, 2026
60
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Vulnerabilities60In the news0Timeline
Severity mix
Critical 8High 10Medium 38Low 3
Severity
All severities60Critical8High10Medium38Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add phpipam to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-7988
8.8
1%
Mar 4
An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4
Affected: 1.4
CVE-2026-97818
8.6
0%
Sep 25
phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php
Affected: through 1.8.3
CVE-2026-75105
7.5
0%
Aug 17
phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter
Affected: before 1.8.2
CVE-2024-10718
7.5
0%
Mar 20
In phpipam/phpipam version 1.5.1, the Secure attribute for sensitive cookies in HTTPS sessions is not set
Affected: before 1.7.0
CVE-2023-41580
7.5
1%
Oct 2
Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-search-result.php
Affected: before 1.5.2
CVE-2023-1211
7.2
3%
Mar 7
SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2
Affected: before 1.5.2
CVE-2022-23046
7.2
25%
Jan 19
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php
Affected: 1.4.4
CVE-2024-41354
7.1
0%
Jul 26
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/widgets/edit.php
Affected: 1.6
CVE-2024-41353
7.1
0%
Jul 26
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php
Affected: 1.6
CVE-2024-41357
7.1
1%
Jul 26
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php
Affected: 1.6
Showing 10