CVE-2021-32663

—

CVSS 3.1

7.5 high

EPSS

1%p72

Published

Oct 19, 2021 (Oct 19, 2021)

Modified

Jun 17, 2026

Description

iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authentication. Given specific parameters this can lead to SSRF. This issue has been resolved in versions 2.6.5 and 2.7.5 and later

Vendors: combodo
Products: itop
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.