Vendors / Issuetrak Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Issuetrak records in CISA KEV No Issuetrak vulnerabilities are listed in CISA KEV.
Priority LOW 36
A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference (IDOR) vulnerability in the Issuetrak audit…
CVSS 3.1 HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00331 · Published 2025-03-13 · No fix listed CWE-639
Priority LOW 24
A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00376 · Published 2024-12-04 · No fix listed CWE-472
Priority LOW 23
A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0039 · Published 2024-12-04 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High1 Medium2 Low0 No CVSS0