osticket

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

osticket records in CISA KEV

No osticket vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Osticket 8 records MEDIUM Osticket Sts 5 records MEDIUM

Records

22 records

TI-2022-03911 CVE-2022-4271 · GHSA-jjf8-m95g-r8qf

Cross-site Scripting (XSS) - Reflected in osticket/osticket

HIGH 66

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00732 Published 2022-12-02 Fixed in 1.16.4 CWE-79

TI-2026-27809 CVE-2026-36214 · GHSA-ffr2-xp93-qf4x

Cross-site scripting in osTicket

MEDIUM 62

osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and insufficient HTML sanitization, allowing remote attackers to execut…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00378 Published 2026-07-14 Fixed in 1.17.8, 1.18.4 CWE-79

TI-2023-01247 CVE-2023-1320 · GHSA-rmpq-m25p-jvvr

Cross-site Scripting (XSS) - Stored in osticket/osticket

MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00624 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2025-28770 CVE-2025-45387 · GHSA-mc52-7658-v986

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.

MEDIUM 58

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00264 Published 2025-06-02 No fix listed CWE-79

TI-2023-01245 CVE-2023-1318 · GHSA-qj56-r3xc-5qwh

Cross-site Scripting (XSS) - Generic in osticket/osticket

MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01015 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01244 CVE-2023-1317 · GHSA-3q24-rrgq-j66h

Cross-site Scripting (XSS) - Reflected in osticket/osticket

MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01015 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01243 CVE-2023-1316 · GHSA-56xv-vr33-49x9

Cross-site Scripting (XSS) - Stored in osticket/osticket

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01242 CVE-2023-1315 · GHSA-726f-x7cp-crqc

Cross-site Scripting (XSS) - Reflected in osticket/osticket

MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01059 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2017-11381 CVE-2017-15580 · GHSA-3grx-cccr-q3vw

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats.

MEDIUM 58

osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.15564 Published 2017-10-23 No fix listed CWE-434

TI-2023-01246 CVE-2023-1319 · GHSA-292m-rvrj-457h

Cross-site Scripting (XSS) - Stored in osticket/osticket

MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00473 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2017-10503 CVE-2017-14396 · GHSA-v33m-xv4g-2xv2

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of…

MEDIUM 47

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02918 Published 2017-09-12 No fix listed CWE-89

TI-2004-00554 CVE-2004-0613 · GHSA-jcj4-h2pg-j964

osTicket allows remote attackers to view sensitive uploaded files and possibly execute…

MEDIUM 45

osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09869 Published 2004-06-30 No fix listed

TI-2010-00577 CVE-2010-0605 · GHSA-qpr7-hfx5-hx7x

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote…

LOW 38

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03048 Published 2010-02-11 No fix listed CWE-89

TI-2005-02035 CVE-2005-2154 · GHSA-g2hv-fr8c-5pq5

PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1…

LOW 37

PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02435 Published 2005-07-06 No fix listed

TI-2005-02034 CVE-2005-2153 · GHSA-63vq-qp86-c7m4

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows…

LOW 36

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01332 Published 2005-07-06 No fix listed

TI-2005-01360 CVE-2005-1438 · GHSA-7j68-cwxq-c8xf

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers…

LOW 36

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01488 Published 2005-05-03 No fix listed

TI-2005-01359 CVE-2005-1437 · GHSA-cfhq-w69f-4767

Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute…

LOW 36

Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01316 Published 2005-05-03 No fix listed

TI-2026-12539 CVE-2026-14871 · GHSA-7x96-96qf-4vq9

osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

LOW 32

osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization (BOLA) leading to Insecure Direct Object Reference (IDOR) in the AJAX ticket-management subsystem.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00427 Published 2026-07-17 No fix listed CWE-863

TI-2004-00555 CVE-2004-0614 · GHSA-m3f7-q43h-937m

osTicket trusts a hidden form field in the submit form to limit the upload size of a…

LOW 31

osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01194 Published 2004-06-30 No fix listed

TI-2017-11275 CVE-2017-15362 · GHSA-q9v5-48c9-9r2g

osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who…

LOW 30

osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0121 Published 2017-10-16 No fix listed CWE-79

TI-2006-06477 CVE-2006-6733 · GHSA-f5gr-fcpv-r733

Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1…

LOW 23

Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to inject arbitrary web script or HTML via the e parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01582 Published 2006-12-26 No fix listed CWE-79

TI-2010-00578 CVE-2010-0606 · GHSA-m8mp-x56m-fcpf

Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable…

LOW 18

Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00877 Published 2010-02-11 No fix listed CWE-79

Open these records in search →