SmarterTools

Records56All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

SmarterTools records in CISA KEV

TI-2026-19690 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability CRITICAL 99KEV 2026-02-05 TI-2025-32755 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability CRITICAL 100KEV 2026-01-26 TI-2026-19133 SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 99KEV 2026-01-26

Components

Products in the NVD configurations · select one to filter the records

Smartermail 27 records CRITICAL Smarterstats 17 records MEDIUM Smartertrack 7 records HIGH Smartermail Enterprise 1 record LOW

Records

7 records in Smartertrack · all components

TI-2020-19061 CVE-2020-36926 · GHSA-rg7x-vp5v-875q

SmarterTools SmarterTrack 7922 -Information Disclosure

HIGH 70

SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00586 Published 2026-01-15 No fix listed CWE-497

TI-2022-08260 CVE-2022-24384 · GHSA-fhxg-444p-h63x

Reflective XSS on SmarterTrack v100.0.8019.14010

MEDIUM 47

Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0409 Published 2022-03-14 Fixed in Build 8075 CWE-79

TI-2022-08263 CVE-2022-24387 · GHSA-38pg-fhjw-6gv5

File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010

MEDIUM 45

With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02058 Published 2022-03-14 Fixed in Build 8075 CWE-434

TI-2022-08262 CVE-2022-24386 · GHSA-jc69-7qfh-4gh7

Stored XSS in SmarterTrack v100.0.8019.14010

LOW 39

Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00708 Published 2022-03-14 Fixed in Build 8075 CWE-79

TI-2022-08261 CVE-2022-24385 · GHSA-w772-882m-xx33

Information disclosure via direct object access on SmarterTrack v100.0.8019.14010

LOW 30

A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00877 Published 2022-03-14 Fixed in Build 8075 CWE-425

TI-2009-04751 CVE-2009-4995 · GHSA-vqf8-229q-6788

Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack…

LOW 22

Cross-site scripting (XSS) vulnerability in frmTickets.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the email address field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00855 Published 2010-08-25 No fix listed CWE-79

TI-2009-04750 CVE-2009-4994 · GHSA-25fh-g53r-vqxf

Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack…

LOW 22

Cross-site scripting (XSS) vulnerability in frmKBSearch.aspx in SmarterTools SmarterTrack before 4.0.3504 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2010-08-25 No fix listed CWE-79

Open these records in search →