Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Owndms records in CISA KEVNo Owndms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 45
OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01587 · Published 2018-10-19 · No fix listed CWE-89
Open these records in search →