CVE-2019-10477: Fusioninventory

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The FusionInventory plugin before 1.4 for GLPI 9.3.x and before 1.1 for GLPI 9.4.x mishandles sendXML actions.

Affected products

• Fusioninventory Fusioninventory: before 1.4 (fixed in 1.4); before 1.1 (fixed in 1.1)

Published 2019-03-29. Last modified 2026-06-17.