request-tracker5 vulnerabilities (Debian)

48 vulnerabilities.

• request-tracker5 Debian Stored XSS via crafted URLs in HTML ticket content in Request Tracker CVE-2026-105454 5.3 MediumOctober 30, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108347 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108352 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108279 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108282 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108351 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108276 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108278 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108277 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108353 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108365 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108273 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108274 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108350 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108344 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108346 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108270 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108275 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108281 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108349 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108343 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108348 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108342 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108363 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108271 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108272 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108371 No scoreOctober 29, 2026
• request-tracker5 Debian [Unknown description] CVE-2026-108280 No scoreOctober 29, 2026
• request-tracker5 Debian RT: LDAP authentication bypass via empty password CVE-2026-41076 Fix available 8.1 HighMay 22, 2026
• request-tracker5 Debian RT: SQL injection via entry_aggregator parameter in JSON search CVE-2026-41075 Fix available 8.8 HighMay 22, 2026
• request-tracker5 Debian RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps CVE-2026-41073 Fix available 4.6 MediumMay 22, 2026
• request-tracker5 Debian Reflected XSS in Request Tracker CVE-2026-6841 Fix available 5.1 MediumMay 21, 2026
• request-tracker5 Debian RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint CVE-2026-44231 Fix available 9.1 CriticalMay 21, 2026
• request-tracker5 Debian RT: Reflected Cross-Site Scripting in search results chart CVE-2026-44230 Fix available 6.1 MediumMay 21, 2026
• request-tracker5 Debian RT: Cross-Site Scripting via inline-served uploaded content CVE-2026-44229 Fix available 5.4 MediumMay 21, 2026
• request-tracker5 Debian Stored XSS in Request Tracker CVE-2025-9158 Fix available 5.3 MediumOctober 24, 2025
• request-tracker5 Debian Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via... CVE-2025-61873 Fix available 2.6 LowOctober 22, 2025
• request-tracker5 Debian Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an... CVE-2025-31501 Fix available 7.2 HighApril 30, 2025
• request-tracker5 Debian Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an... CVE-2025-31500 Fix available 7.2 HighApril 30, 2025
• request-tracker5 Debian Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via... CVE-2025-30087 Fix available 7.2 HighApril 30, 2025
• request-tracker5 Debian Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME CVE-2025-2545 Fix available 2.3 LowApril 30, 2025
• request-tracker5 Debian Information exposure vulnerability in Request Tracker (RT) CVE-2024-3262 Fix available 5.5 MediumApril 4, 2024
• request-tracker5 Debian Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a... CVE-2023-45024 Fix available 7.5 HighOctober 30, 2023
• request-tracker5 Debian Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure... CVE-2023-41260 Fix available 7.5 HighOctober 30, 2023
• request-tracker5 Debian Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information... CVE-2023-41259 Fix available 7.5 HighOctober 30, 2023
• request-tracker5 Debian Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search. CVE-2022-25803 Fix available 6.1 MediumJuly 14, 2022
• request-tracker5 Debian Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted... CVE-2022-25802 Fix available 6.1 MediumJuly 13, 2022
• request-tracker5 Debian Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2... CVE-2021-38562 Fix available 7.5 HighOctober 18, 2021