Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how itop compares to other vendors in security performance

View Risk Score →

iTop iTop VPNA DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placi…

Risk 68
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6.

First published (updated )
CVE-2024-53588

Combodo iTopiTop vulnerable to XSS vulnerability in authent-token

Risk 77
Severity
8.8
XSS
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

iTop is an IT service management platform. When displaying/editing the user's personal tokens, XSS attacks are possible. This vulnerability is fixed in 3.1.1.

First published (updated )
CVE-2023-47626

iTop iTopiTop vulnerable to XSS in dashlet modifications ajax endpoints

Risk 38
Severity
6.8
XSS
AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.

First published (updated )
CVE-2023-44396

iTop DualSafe Password Manager & Digital VaultAn issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to …

Risk 38
Severity
7.1
EPSS
0.04%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive information via leaked credentials as plaintext in a log file that can be accessed by the local user without knowledge of the master secret.

First published (updated )
CVE-2024-24272

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203