Known vulnerabilities in osTicket - page 2

Software: osTicket
Software CPE: cpe:2.3:a:osticket_com:osticket:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 28
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting osTicket osTicket is affected by 28 known vulnerabilities: 4 high, 4 medium, 20 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30831 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-14749
CWE-74 High
Available
No
1.12.1 07.08.2019 SB2019080755
#VU30832 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14750
CWE-79 Low
Available
No
1.12.1 07.08.2019 SB2019080755
#VU35737 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13397
CWE-79 Low
No
No
- 09.07.2019 SB2017101615
#VU31088 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11537
CWE-79 Low
No
No
1.12 25.04.2019 SB2019042509
#VU38020 - Unrestricted Upload of File with Dangerous Type
CVE-2017-15580
CWE-434 High
Available
No
- 23.10.2017 SB2017101615
#VU38069 - Cross-Site Request Forgery (CSRF)
CVE-2017-15362
CWE-352 Medium
No
No
- 16.10.2017 SB2017101615
#VU38295 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-14396
CWE-89 High
No
No
- 12.09.2017 SB2017091245
#VU41490 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-4744
CWE-79 Low
No
No
- 09.07.2014 SB2014070902


Showing elements 21 - 40 out of 28