Vulnerabilidades em osticket
9 resultadosAnálise Vexday
O osTicket apresenta 7 vulnerabilidades conhecidas na base Vexday, todas de severidade menor que crítica, com nenhuma sob exploração ativa no momento. A fraqueza predominante é XSS (CWE-79), típica de aplicações web, sem registros recentes de novas exposições nos últimos 90 dias, indicando risco estável e de baixa urgência operacional.
CVE-2023-1315MEDIUMCross-site Scripting (XSS) - Reflected in osticket/osticketEPSS 1.1%CVE-2023-1317MEDIUMCross-site Scripting (XSS) - Reflected in osticket/osticketEPSS 1.0%CVE-2023-1318MEDIUMCross-site Scripting (XSS) - Generic in osticket/osticketEPSS 1.0%CVE-2022-4271HIGHCross-site Scripting (XSS) - Reflected in osticket/osticketEPSS 0.7%CVE-2023-1320HIGHCross-site Scripting (XSS) - Stored in osticket/osticketEPSS 0.6%CVE-2023-1316MEDIUMCross-site Scripting (XSS) - Stored in osticket/osticketEPSS 0.5%CVE-2023-1319MEDIUMCross-site Scripting (XSS) - Stored in osticket/osticketEPSS 0.5%CVE-2026-14871HIGHosTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosureEPSS 0.4%CVE-2026-36214MEDIUMosTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip cEPSS 0.3%