PL
Vendor
pluginsGLPI
13
CVEs
0
On KEV
0
New 30D
Products
FI9.1
fields
pluginsGLPI
3 CVEs0 on KEV0 new
DA6.4
databaseinventory
pluginsGLPI
2 CVEs0 on KEV0 new
AD8.2
addressing
pluginsGLPI
1 CVEs0 on KEV0 new
DA6.4
datainjection
pluginsGLPI
1 CVEs0 on KEV0 new
ES6.5
escalade
pluginsGLPI
1 CVEs0 on KEV0 new
FO5.4
formcreator
pluginsGLPI
1 CVEs0 on KEV0 new
MR6.5
mreporting
pluginsGLPI
1 CVEs0 on KEV0 new
OR8.8
order
pluginsGLPI
1 CVEs0 on KEV0 new
SC5.3
sccm
pluginsGLPI
1 CVEs0 on KEV0 new
TA6.4
tag
pluginsGLPI
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-11321 | DA datainjection pluginsGLPI | 6.4 | Jul 10 | GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import |
| CVE-2026-53987 | TA tag pluginsGLPI | 6.4 | Jul 9 | Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge Rendering |
| CVE-2026-23489 | FI fields pluginsGLPI | 9.1 | Mar 16 | Fields GLPI plugin vulnerable to RCE in dropdown generation |
| CVE-2026-22821 | MR mreporting pluginsGLPI | 6.5 | Feb 12 | mreporting affected by a SQLI on date change |
| CVE-2025-65035 | DA databaseinventory pluginsGLPI | 6.4 | Dec 19 | GLPI Database Inventory Plugin Vulnerable to Stored Object Injection |
| CVE-2025-53360 | DA databaseinventory pluginsGLPI | 4.3 | Nov 18 | pluginsGLPI's Database Inventory Plugin allows any authenticated user to send agent requests |
| CVE-2025-27153 | ES escalade pluginsGLPI | 6.5 | Jul 1 | Escalade GLPI Plugin Vulnerable to Improper Access Control |
| CVE-2024-53850 | AD addressing pluginsGLPI | 8.2 | Dec 26 | The Addressing GLPI plugin allows data enumeration through uncontrolled object instantiation |
| CVE-2024-45600 | FI fields pluginsGLPI | 7.7 | Dec 26 | Fields GLPI plugin has an Authenticated SQL Injection |
| CVE-2023-33971 | FO formcreator pluginsGLPI | 5.4 | May 31 | Formcreator vulnerable to stored XSS from ##FULLFORM## |
| CVE-2023-29006 | OR order pluginsGLPI | 8.8 | Apr 5 | Order GLPI plugin vulnerable to remote code execution from authenticated user |
| CVE-2023-28855 | FI fields pluginsGLPI | 6.5 | Apr 5 | Fields GLPI plugin vulnerable to unauthorized write access to additional fields |
| CVE-2021-39190 | SC sccm pluginsGLPI | 5.3 | Sep 22 | SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor |
