CVE-2020-15221

MEDIUM 5.4CVE-2020-15221 · Published 13/01/2021 · updated 17/06/2026

In short

CVE-2020-15221 is a MEDIUM (CVSS 5.4) vulnerability affecting itop (combodo).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.5% of all vulnerabilities.
Fix: update to 2.7.2 or later.

Package	Affected versions	Patched versions
itop combodo	`= 3.0.0< 2.7.2`	`2.7.2`

Description

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, by modifying target browser local storage, an XSS can be generated in the iTop console breadcrumb. This is fixed in versions 2.7.2 and 3.0.0.

References

Combodo/iTop security advisory · Third Party Advisory

More vulnerabilities in itop

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

itop

combodo

= 3.0.0< 2.7.2

2.7.2

More vulnerabilities in itop

See all →