How many CVEs does glpi-project glpi-inventory-plugin have?

glpi-project glpi-inventory-plugin has 7 published CVE records since 2022.

How many glpi-project glpi-inventory-plugin CVEs are in CISA KEV?

None of glpi-project glpi-inventory-plugin's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for glpi-project glpi-inventory-plugin vulnerabilities?

Yes — 1 of glpi-project glpi-inventory-plugin's CVEs have a known public exploit.

Which versions of glpi-project glpi-inventory-plugin are affected?

39 distinct glpi-project glpi-inventory-plugin versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in glpi-project glpi-inventory-plugin CVEs?

glpi-project glpi-inventory-plugin's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How many critical glpi-project glpi-inventory-plugin vulnerabilities are there?

glpi-project glpi-inventory-plugin has 1 critical and 3 high-severity CVEs.

What is the average severity of glpi-project glpi-inventory-plugin CVEs?

The average CVSS base score across glpi-project glpi-inventory-plugin's scored CVEs is 7.5.

glpi-project glpi-inventory-plugin Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every glpi-project glpi-inventory-plugin version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0.07 CVEs
1.0.17 CVEs
1.0.25 CVEs
1.0.35 CVEs
1.0.45 CVEs
1.0.55 CVEs
1.0.65 CVEs
1.1.05 CVEs
1.2.05 CVEs
1.2.15 CVEs
1.2.25 CVEs
1.2.35 CVEs
1.3.05 CVEs
1.3.15 CVEs
1.3.25 CVEs
1.3.35 CVEs
1.3.45 CVEs
1.3.55 CVEs
1.4.05 CVEs
1.5.03 CVEs
1.5.12 CVEs
1.5.22 CVEs
1.5.32 CVEs
1.6.02 CVEs
1.6.0-beta12 CVEs
1.6.0-beta22 CVEs
1.6.12 CVEs
1.6.22 CVEs
1.6.32 CVEs
1.6.42 CVEs
1.6.52 CVEs

Version ranges

< 1.0.22 CVEs
< 1.5.02 CVEs
< 1.6.62 CVEs
< 1.5.11 CVE

Fixed in

100292d0f7d48a0befe5ba04177c0804fe173b612 CVEs
5a80297c7e8faf9033fceca581ad4418bf081c112 CVEs
b0c5d82629e3b47993003fe499e279802bcfdb662 CVEs
c07a93a5f7d48c4426bce7216953a49378f997db1 CVE

Find a version

7 CVEs

Sort

GLPI Inventory Plugin has SQL Injection on dropdown_calendar Report
CVE-2026-26001
Patch
CWE-89
High · CVSS 8.8
EPSS 0.4% (32th pct)2026-03-17
GLPI Inventory Plugin has Reflected XSS in task jobs
CVE-2026-25590
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.3% (19th pct)2026-03-03
GLPI Inventory Plugin is Vulnerable to Unauthenticated SQL Injection
CVE-2025-32786
Patch
CWE-89
High · CVSS 7.5
EPSS 7.0% (94th pct)2025-11-04
GLPI Inventory plugin has Improper Access Control Vulnerability
CVE-2025-27147
Patch
CWE-22
High · CVSS 8.2
EPSS 0.4% (36th pct)2025-03-25
GLPI Inventory Plugin vulnerable to reflective Cross-site Scripting
CVE-2025-26626
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (26th pct)2025-03-14
Critical vulnerability · 2022-06-27
CVE-2022-31082
Patch
CWE-89
Critical · CVSS 9.8
EPSS 1.0% (63th pct)2022-06-27
Medium vulnerability · 2022-06-20
CVE-2022-31062
Public exploit
Patch
CWE-22
Medium · CVSS 5.3
EPSS 5.9% (93th pct)2022-06-20

glpi-project glpi-inventory-plugin Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other glpi-project products

Frequently asked questions

References

Track glpi-project glpi-inventory-plugin vulnerabilities