snipe-it
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 68 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 12, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Snipe-IT: Stored XSS via Custom Field name in asset-list column headers
Snipe-IT: 2FA bypass via the API token flow
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API
Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout
Snipe-IT 8.6.3 Broken Access Control via Kit Update Endpoints
Snipe-IT 8.6.3 Stored XSS via Department Names
Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num
Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation
Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout
Snipe-IT before 8.7.0 Improper Input Validation via API Checkout
Monitor snipe-it in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.