Phpipam
C
CAUTION
20
Total CVEs
1
Crit / High
3
Medium
4%
Unpatched
48%
Patched
4.3
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 11 patched ✗ 1 unpatched ~ 4 under review ⏳ 7 pending score
Intelligence by Audience
PoC Available
8 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"phpipam" port:443
org:"Phpipam" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
20
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
4%
Avg CVSS score
4.3
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-08
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-08
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
No recent security news found for Phpipam.
Recent CVEs
showing 20 of 23
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-61078 | 6.1 MEDIUM | UNKNOWN / UNPATCHED | 0.27% | 2025-12-09 |
| CVE-2025-60912 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.12% | 2025-12-08 |
| CVE-2024-10721 | 3.5 LOW | PATCHED / FIX AVAILABLE | 0.34% | 2025-03-20 |
| CVE-2024-10727 | 3.5 LOW | PATCHED / FIX AVAILABLE | 0.35% | 2025-03-20 |
| CVE-2024-10720 | 8.2 HIGH | PATCHED / FIX AVAILABLE | 0.39% | 2025-03-20 |
| CVE-2024-10722 | 3.5 LOW | PATCHED / FIX AVAILABLE | 0.34% | 2025-03-20 |
| CVE-2024-10719 | 2.4 LOW | PATCHED / FIX AVAILABLE | 0.34% | 2025-03-20 |
| CVE-2024-10718 | 5.3 MEDIUM | PATCHED / FIX AVAILABLE | 0.33% | 2025-03-20 |
| CVE-2024-10724 | 3.5 LOW | PATCHED / FIX AVAILABLE | 0.34% | 2025-03-20 |
| CVE-2024-10723 | 3.5 LOW | PATCHED / FIX AVAILABLE | 0.34% | 2025-03-20 |
| CVE-2024-10725 | 3.5 LOW | PATCHED / FIX AVAILABLE | 0.34% | 2025-03-20 |
| CVE-2022-1226 | 3.5 LOW | PATCHED / FIX AVAILABLE | 0.41% | 2024-11-15 |
| CVE-2024-0787 | 5.3 MEDIUM | PATCHED / FIX AVAILABLE | 0.46% | 2024-11-15 |
| CVE-2024-41358 PoC | ? N/A | PATCH UNDER REVIEW | 1.59% | 2024-08-29 |
| CVE-2024-41356 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.41% | 2024-07-26 |
| CVE-2024-41355 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.29% | 2024-07-26 |
| CVE-2024-41353 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.28% | 2024-07-26 |
| CVE-2024-41354 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.28% | 2024-07-26 |
| CVE-2024-41357 PoC | ? N/A | UNKNOWN / UNPATCHED | 1.12% | 2024-07-26 |
| CVE-2023-24657 PoC | ? N/A | UNKNOWN / UNPATCHED | 3.90% | 2023-03-08 |
Intel
LicenseOpen Source
Trust ScoreC — CAUTION
Max CVSS8.2
Last Updated2026-07-08
Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
16 occurrences in Phpipam CVEs
(80% of total)
CWE-614
Unknown Weakness Type
1 occurrence in Phpipam CVEs
(5% of total)
CWE-98
Unknown Weakness Type
1 occurrence in Phpipam CVEs
(5% of total)
CWE-352
Cross-Site Request Forgery (CSRF)
1 occurrence in Phpipam CVEs
(5% of total)
CWE-74
Unknown Weakness Type
1 occurrence in Phpipam CVEs
(5% of total)
Company Profile
phpIPAM is an open-source IP address management (IPAM) software used for managing and tracking IP addresses and subnets in network environments. It provides a web-based interface for administrators to oversee IPv4 and IPv6 address spaces, VLANs, and related network resources. Its cybersecurity relevance lies in its role in maintaining accurate network asset inventories, which is critical for vulnerability management and incident response.
Response Metrics
Est. MTTR ⓘ
~109 days
(Poor)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -82% better
CVE count 2026 vs 2025:
11 → 2 CVEs
Patch Speed ⓘ Poor (>65% open)
4% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M
Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Phpipam C valtersit.com