Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Issuetrak Clear all filters
TI-2025-01996 CVE-2025-2271 · GHSA-786g-4r53-jp5v

IDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp

Priority LOW 36

A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference (IDOR) vulnerability in the Issuetrak audit…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00331 Published 2025-03-13 No fix listed CWE-639
TI-2024-11245 CVE-2024-12123 · GHSA-2jgc-wx9f-vpp5

Unauthorized Modification of Ticket Requester

Priority LOW 24

A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00376 Published 2024-12-04 No fix listed CWE-472