Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: GestSup 3.2.60 Clear all filters
TI-2026-17806 CVE-2026-22196 · GHSA-fwm4-r23r-5x9x

GestSup < 3.2.60 SQL Injection in Ticket Creation

Priority LOW 36

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00319 Published 2026-01-09 Fixed in 3.2.60 CWE-89
TI-2026-17808 CVE-2026-22198 · GHSA-mr2r-3ff7-jfw5

GestSup < 3.2.60 Stored XSS in API Error Logs

Priority LOW 23

GestSup versions prior to 3.2.60 contain a pre-authentication stored cross-site scripting (XSS) vulnerability in the API error logging functionality.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00294 Published 2026-01-09 Fixed in 3.2.60 CWE-79
TI-2026-17807 CVE-2026-22197 · GHSA-qv4c-5j2h-4442

GestSup < 3.2.60 Multiple SQL Injections in Asset List

Priority LOW 35

GestSup versions prior to 3.2.60 contain multiple SQL injection vulnerabilities in the asset list functionality.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00324 Published 2026-01-09 Fixed in 3.2.60 CWE-89
TI-2026-17805 CVE-2026-22195 · GHSA-c5rf-v4g6-p7vf

GestSup < 3.2.60 SQL Injection in Search Bar

Priority LOW 36

GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in the search bar functionality.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00319 Published 2026-01-09 Fixed in 3.2.60 CWE-89