Enhancesoft

Records49All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Enhancesoft records in CISA KEV

No Enhancesoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Osticket 45 records HIGH Audit Log 2 records HIGH

Records

2 records in Audit Log · all components

TI-2022-13729 CVE-2022-31890 · GHSA-qw96-mrmv-h5qw

SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before…

HIGH 82

SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae via the order parameter to the getOrder function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01503 Published 2023-04-05 No fix listed CWE-89

TI-2022-13728 CVE-2022-31889 · GHSA-5wx7-h6ww-mx8h

Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in…

MEDIUM 60

Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00651 Published 2023-04-05 No fix listed CWE-79

Open these records in search →

Critical	4
High	9
Medium	35
Low	1
No CVSS	0