Skip to content
OpenAdvisories

Product · GLPI

glpi-inventory-plugin

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.5
    CVE-2026-25590

    GLPI Inventory Plugin has Reflected XSS in task jobs

    The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Prior to 1.6.6, there is a reflected XSS vulnerability in task jobs. This vulnerability is fixed in 1.6.6.

    GLPI glpi-inventory-plugin
  • Medium 6.5
    CVE-2025-26626

    GLPI Inventory Plugin vulnerable to reflective Cross-site Scripting

    The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5…

    GLPI glpi-inventory-plugin
  • Medium 5.8
    CVE-2022-31082

    SQL Injection via package deployment tasks in glpi-inventory-plugin

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. glpi-inventory-plugin is a plugin for GLPI to handle inventory management. In affected versions a SQL injection can be…

    GLPI glpi-inventory-plugin glpi Ubuntu
  • Medium 5.3
    CVE-2022-31062 Public exploit

    Unauthenticated Local File Inclusion

    ### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.php` file can be deleted if deploy feature is not used.

    GLPI glpi-inventory-plugin