Vulnerabilities

Filters

Reset all

2 selected

45 records

Sort

Vendor: Enhancesoft Component: Osticket Clear all filters

TI-2026-21411 CVE-2026-26895 · GHSA-6p2p-wf8c-wq75

User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote…

MEDIUM 63

User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0036 Published 2026-04-02 No fix listed CWE-203

TI-2026-17810 CVE-2026-22200 · GHSA-4hcq-q3qf-q453

osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read

HIGH 82

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.73589 Published 2026-01-12 Fixed in 1.18.3, 1.17.7 CWE-74

TI-2025-19272 CVE-2025-26241 · GHSA-p576-652x-gvvh

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in…

HIGH 70

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1.17.5 allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_id" URL parameters com…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00304 Published 2025-05-05 No fix listed CWE-89

TI-2023-25359 CVE-2023-46967 · GHSA-vgjv-qpvm-qjx7

Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket…

MEDIUM 60

Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00439 Published 2024-02-20 No fix listed CWE-79

TI-2023-11944 CVE-2023-27149 · GHSA-4mwj-qxcc-x2p8

A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a cu…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00409 Published 2023-10-23 No fix listed CWE-79

TI-2023-11943 CVE-2023-27148 · GHSA-r2hq-xr24-chr5

A stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Role Name parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00409 Published 2023-10-23 No fix listed CWE-79

TI-2021-20853 CVE-2021-45811 · GHSA-h3wq-7fh4-v9c2

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in…

MEDIUM 62

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_id" URL parameters combi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02496 Published 2023-09-08 No fix listed CWE-89

TI-2023-14123 CVE-2023-30082 · GHSA-r6x9-4x42-c57h

A denial of service attack might be launched against the server if an unusually lengthy…

HIGH 66

A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00999 Published 2023-06-14 No fix listed CWE-1284

TI-2022-13727 CVE-2022-31888 · GHSA-w4fp-2356-fr6f

Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.

HIGH 73

Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01214 Published 2023-04-05 No fix listed CWE-384

TI-2023-01247 CVE-2023-1320 · GHSA-rmpq-m25p-jvvr

Cross-site Scripting (XSS) - Stored in osticket/osticket

MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00624 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01246 CVE-2023-1319 · GHSA-292m-rvrj-457h

Cross-site Scripting (XSS) - Stored in osticket/osticket

MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00473 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01245 CVE-2023-1318 · GHSA-qj56-r3xc-5qwh

Cross-site Scripting (XSS) - Generic in osticket/osticket

MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01015 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01244 CVE-2023-1317 · GHSA-3q24-rrgq-j66h

Cross-site Scripting (XSS) - Reflected in osticket/osticket

MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01015 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01243 CVE-2023-1316 · GHSA-56xv-vr33-49x9

Cross-site Scripting (XSS) - Stored in osticket/osticket

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2023-01242 CVE-2023-1315 · GHSA-726f-x7cp-crqc

Cross-site Scripting (XSS) - Reflected in osticket/osticket

MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01059 Published 2023-03-10 Fixed in v1.16.6 CWE-79

TI-2022-03911 CVE-2022-4271 · GHSA-jjf8-m95g-r8qf

Cross-site Scripting (XSS) - Reflected in osticket/osticket

HIGH 66

Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00732 Published 2022-12-02 Fixed in 1.16.4 CWE-79

TI-2022-13841 CVE-2022-32074 · GHSA-qvw5-f6fh-hj9g

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php…

LOW 27

A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web s…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01495 Published 2022-07-13 No fix listed CWE-79

TI-2021-18686 CVE-2021-42235 · GHSA-6wv3-7rx8-2362

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process…

MEDIUM 44

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01036 Published 2022-05-04 No fix listed CWE-89

TI-2020-14357 CVE-2020-22609 · GHSA-9c7g-wvc7-p6vc

Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the…

LOW 28

Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2021-06-28 No fix listed CWE-79

TI-2020-14356 CVE-2020-22608 · GHSA-xj4x-pg94-f3mf

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the…

LOW 28

Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00672 Published 2021-06-28 No fix listed CWE-79

TI-2020-15225 CVE-2020-24881 · GHSA-m4x8-8rrp-jpc6

SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

HIGH 80

SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.73449 Published 2020-11-02 No fix listed CWE-918

TI-2020-15241 CVE-2020-24917 · GHSA-f4h3-3557-hgpp

osTicket before 1.14.3 allows XSS via a crafted filename to…

LOW 30

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01225 Published 2020-08-30 No fix listed CWE-79

TI-2020-12724 CVE-2020-16193 · GHSA-q88j-2hcx-grw4

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call.

LOW 25

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00587 Published 2020-08-26 No fix listed CWE-79

TI-2020-10978 CVE-2020-14012 · GHSA-3c4q-r927-v47w

scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or…

LOW 25

scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0051 Published 2020-06-10 No fix listed CWE-79

TI-2020-10045 CVE-2020-12629 · GHSA-vhh4-48r8-q5fg

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.

LOW 27

include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01504 Published 2020-05-04 No fix listed CWE-79