Known vulnerabilities in Request Tracker

Software CPE: cpe:2.3:a:bestpractical:rt4:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Request Tracker Request Tracker is affected by 12 known vulnerabilities: 5 medium, 7 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82259 - Externally-generated error message containing sensitive information
CWE-211 Low
No
No
5.0.5 19.10.2023 SB20231019104
#VU82258 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45024
CWE-200 Low
No
No
5.0.5 19.10.2023 SB20231019104
SB2023103105
#VU82257 - Exposure of sensitive information to an unauthorized actor
CVE-2023-41260
CWE-200 Medium
No
No
4.4.7, 5.0.5 19.10.2023 SB20231019104
SB2023103104
SB2023103105
and 1 more
#VU82256 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-41259
CWE-79 Medium
No
No
4.4.7, 5.0.5 19.10.2023 SB20231019104
SB2023103104
SB2023103105
and 1 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160
CWE-79 Low
No
No
5.0.4 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU65398 - Server-Side Request Forgery (SSRF)
CVE-2022-25800
CWE-918 Medium
No
No
4.0.3, 5.0.3 18.07.2022 SB2022071818
#VU65397 - Server-Side Request Forgery (SSRF)
CVE-2022-25801
CWE-918 Medium
No
No
4.0.3, 5.0.3 18.07.2022 SB2022071818
#VU65304 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-25803
CWE-601 Low
No
No
5.0.3 14.07.2022 SB2022071412
#VU65303 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-25802
CWE-79 Medium
No
No
4.4.6, 5.0.3 14.07.2022 SB2022071412
SB2022071431
SB2023120438
#VU65301 - Observable discrepancy
CVE-2021-38562
CWE-203 Low
No
No
4.2.17, 4.4.5, 5.0.2 14.07.2022 SB2022071411
SB2023120438
SB2021100429
and 5 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
5.0.3 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU32361 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-5475
CWE-79 Low
No
No
4.2.12 14.08.2015 SB2015081403
SB2015081405