Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-11697

In Combodo iTop, dashboard ids can be exploited with a reflective XSS payload. This is fixed in all iTop packages (community, essential, professional) for version 2.7.0 and in iTop essential and iTop professional packages for version 2.6.4.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2020-11697
  • Combodo » Itop » Version: Any
    cpe:2.3:a:combodo:itop:*
  • Combodo » Itop » Version: 0.7.1
    cpe:2.3:a:combodo:itop:0.7.1
  • Combodo » Itop » Version: 0.8.0
    cpe:2.3:a:combodo:itop:0.8.0
  • Combodo » Itop » Version: 0.9.1
    cpe:2.3:a:combodo:itop:0.9.1
  • Combodo » Itop » Version: 1.0.0
    cpe:2.3:a:combodo:itop:1.0.0
  • Combodo » Itop » Version: 1.1.0
    cpe:2.3:a:combodo:itop:1.1.0
  • Combodo » Itop » Version: 1.2.0
    cpe:2.3:a:combodo:itop:1.2.0
  • Combodo » Itop » Version: 2.0.0
    cpe:2.3:a:combodo:itop:2.0.0
  • Combodo » Itop » Version: 2.0.1
    cpe:2.3:a:combodo:itop:2.0.1
  • Combodo » Itop » Version: 2.0.2
    cpe:2.3:a:combodo:itop:2.0.2
  • Combodo » Itop » Version: 2.0.3
    cpe:2.3:a:combodo:itop:2.0.3
  • Combodo » Itop » Version: 2.1.0
    cpe:2.3:a:combodo:itop:2.1.0
  • Combodo » Itop » Version: 2.2.0
    cpe:2.3:a:combodo:itop:2.2.0
  • Combodo » Itop » Version: 2.3.2
    cpe:2.3:a:combodo:itop:2.3.2
  • Combodo » Itop » Version: 2.4.2
    cpe:2.3:a:combodo:itop:2.4.2
  • Combodo » Itop » Version: 2.6.0
    cpe:2.3:a:combodo:itop:2.6.0
  • Combodo » Itop » Version: 2.6.3
    cpe:2.3:a:combodo:itop:2.6.3
  • Combodo » Itop » Version: 2.6.4
    cpe:2.3:a:combodo:itop:2.6.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved