PL
Vendor
pluginsGLPI
8
CVEs
0
On KEV
0
New 30D
Products
DA6.4
databaseinventory
pluginsGLPI
2 CVEs0 on KEV0 new
FI9.1
fields
pluginsGLPI
2 CVEs0 on KEV0 new
AD8.2
addressing
pluginsGLPI
1 CVEs0 on KEV0 new
DA6.4
datainjection
pluginsGLPI
1 CVEs0 on KEV0 new
ES6.5
escalade
pluginsGLPI
1 CVEs0 on KEV0 new
MR6.5
mreporting
pluginsGLPI
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-11321 | DA datainjection pluginsGLPI | 6.4 | Jul 10 | GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import |
| CVE-2026-23489 | FI fields pluginsGLPI | 9.1 | Mar 16 | Fields GLPI plugin vulnerable to RCE in dropdown generation |
| CVE-2026-22821 | MR mreporting pluginsGLPI | 6.5 | Feb 12 | mreporting affected by a SQLI on date change |
| CVE-2025-65035 | DA databaseinventory pluginsGLPI | 6.4 | Dec 19 | GLPI Database Inventory Plugin Vulnerable to Stored Object Injection |
| CVE-2025-53360 | DA databaseinventory pluginsGLPI | 4.3 | Nov 18 | pluginsGLPI's Database Inventory Plugin allows any authenticated user to send agent requests |
| CVE-2025-27153 | ES escalade pluginsGLPI | 6.5 | Jul 1 | Escalade GLPI Plugin Vulnerable to Improper Access Control |
| CVE-2024-53850 | AD addressing pluginsGLPI | 8.2 | Dec 26 | The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation |
| CVE-2024-45600 | FI fields pluginsGLPI | 7.7 | Dec 26 | Fields GLPI plugin has an Authenticated SQL Injection |