Osticket@* Security Vulnerabilities and Issues — Osticket@* CVE List

Lucene search

EnhancesoftOsticket*

14 matches found

CVE•added 2024/02/20 9:15 p.m.•4008 views

CVE-2023-46967

Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket.

6.1CVSS6.6AI score0.00108EPSS

CVE•added 2022/05/04 5:15 p.m.•80 views

CVE-2021-42235

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.

9.8CVSS9.9AI score0.0025EPSS

CVE•added 2022/12/02 4:15 p.m.•62 views

CVE-2022-4271

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4.

8CVSS5.6AI score0.00176EPSS

CVE•added 2021/06/28 7:15 p.m.•52 views

CVE-2020-22609

Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php.

6.1CVSS6AI score0.0024EPSS

CVE•added 2023/09/08 2:15 a.m.•51 views

CVE-2021-45811

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_id" URL parameters combination.

6.5CVSS7AI score0.61668EPSS

CVE•added 2023/03/10 4:15 p.m.•50 views

CVE-2023-1317

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

5.4CVSS5.3AI score0.03622EPSS

CVE•added 2023/03/10 4:15 p.m.•49 views

CVE-2023-1319

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

4.8CVSS4.9AI score0.00063EPSS

CVE•added 2023/03/10 4:15 p.m.•48 views

CVE-2023-1315

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

5.4CVSS5.3AI score0.31019EPSS

CVE•added 2021/06/28 7:15 p.m.•44 views

CVE-2020-22608

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php.

6.1CVSS6AI score0.00216EPSS

CVE•added 2023/04/05 10:15 p.m.•43 views

CVE-2022-31888

Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.

8.8CVSS8.6AI score0.0074EPSS

CVE•added 2023/03/10 4:15 p.m.•43 views

CVE-2023-1316

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

5.4CVSS4.9AI score0.00076EPSS

CVE•added 2023/03/10 4:15 p.m.•41 views

CVE-2023-1318

Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.

5.4CVSS5.3AI score0.07783EPSS

CVE•added 2023/03/10 4:15 p.m.•39 views

CVE-2023-1320

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

7.1CVSS6.1AI score0.00399EPSS

CVE•added 2020/05/04 1:15 p.m.•38 views

CVE-2020-12629

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.

5.4CVSS5.2AI score0.00221EPSS