Product by Snipe

    Snipe/snipe-it

    26 known vulnerabilities in Snipe/snipe-it (Snipe), 0 of them actively exploited (CISA KEV).

    Key figures

    26

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Snipe/snipe-it (Snipe)
    HighCVE-2022-23064

    Snipe-IT - Host Header Injection

    also in 2 other products

    		8.8
    CriticalCVE-2022-1380

    Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it

    also in 1 other product

    		9.1
    CriticalCVE-2022-1445

    Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it

    also in 1 other product

    		9.0
    HighCVE-2022-0611

    Missing Authorization in snipe/snipe-it

    also in 1 other product

    		6.3
    HighCVE-2022-1155

    Snipe/snipe-it: Business Logic Errors

    also in 1 other product

    		7.4
    MediumCVE-2022-1511

    Missing Authorization in snipe/snipe-it

    also in 1 other product

    		6.5
    MediumCVE-2022-0579

    Missing Authorization in snipe/snipe-it

    also in 1 other product

    		6.5
    HighCVE-2021-3961

    Cross-site Scripting (XSS) - Stored in snipe/snipe-it

    also in 1 other product

    		8.0
    MediumCVE-2021-3879

    Cross-site Scripting (XSS) - Stored in snipe/snipe-it

    also in 1 other product

    		6.8
    MediumCVE-2022-0569

    Observable Discrepancy in snipe/snipe-it

    also in 1 other product

    		5.3
    MediumCVE-2022-0622

    Generation of Error Message Containing Sensitive Information in snipe/snipe-it

    also in 1 other product

    		5.3
    MediumCVE-2021-4108

    Cross-site Scripting (XSS) - Stored in snipe/snipe-it

    also in 1 other product

    		6.4
    MediumCVE-2022-3035

    Cross-site Scripting (XSS) - Stored in snipe/snipe-it

    also in 1 other product

    		5.9
    HighCVE-2022-2997

    Session Fixation in snipe/snipe-it

    also in 1 other product

    		4.6
    HighCVE-2024-5685

    Broken Function Level Authorization (BFLA) in snipe/snipe-it

    also in 2 other products

    		7.6
    MediumCVE-2021-3863

    Cross-site Scripting (XSS) - Generic in snipe/snipe-it

    also in 1 other product

    		5.5
    MediumCVE-2021-4018

    Cross-site Scripting (XSS) - Stored in snipe/snipe-it

    also in 1 other product

    		6.3
    MediumCVE-2022-0179

    Missing Authorization in snipe/snipe-it

    also in 1 other product

    		6.3
    MediumCVE-2022-3173

    Improper Authentication in snipe/snipe-it

    also in 1 other product

    		4.3
    MediumCVE-2023-5452

    Cross-site Scripting (XSS) - Stored in snipe/snipe-it

    also in 1 other product

    		5.5
    MediumCVE-2022-0178

    Missing Authorization in snipe/snipe-it

    also in 1 other product

    		6.3
    HighCVE-2023-5511

    Cross-Site Request Forgery (CSRF) in snipe/snipe-it

    also in 1 other product

    		6.3
    HighCVE-2021-3858

    Cross-Site Request Forgery (CSRF) in snipe/snipe-it

    also in 1 other product

    		4.3
    MediumCVE-2021-3938

    Cross-site Scripting (XSS) - Generic in snipe/snipe-it

    also in 1 other product

    		3.9
    HighCVE-2021-4130

    Cross-Site Request Forgery (CSRF) in snipe/snipe-it

    also in 1 other product

    		4.3

    All vulnerabilities in search

    All products by Snipe