Bestpractical vulnerabilities

Products

• Rt 48
• Request Tracker 32
• Request Tracker 6
• Request Tracker For Incident Response 2

Newest

• best practical solutions request tracker Stored XSS via crafted URLs in HTML ticket content in Request Tracker CVE-2026-105454 5.3 MediumOctober 30, 2026
• bestpractical rt, request tracker +1 more RT: Stored Cross-Site Scripting via insufficient template escaping CVE-2026-44228 5.4 MediumJuly 20, 2026
• bestpractical rt RT: LDAP authentication bypass via empty password CVE-2026-41076 Fix available 8.1 HighMay 22, 2026
• bestpractical rt RT: SQL injection via entry_aggregator parameter in JSON search CVE-2026-41075 Fix available 8.8 HighMay 22, 2026
• bestpractical rt RT has broken CSRF protection for authenticated users CVE-2026-41074 7.1 HighMay 22, 2026
• bestpractical rt RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps CVE-2026-41073 Fix available 4.6 MediumMay 22, 2026
• best practical request tracker Reflected XSS in Request Tracker CVE-2026-6841 Fix available 5.1 MediumMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint CVE-2026-44231 Fix available 9.1 CriticalMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Reflected Cross-Site Scripting in search results chart CVE-2026-44230 Fix available 6.1 MediumMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Cross-Site Scripting via inline-served uploaded content CVE-2026-44229 Fix available 5.4 MediumMay 21, 2026
• bestpractical rt, request tracker +1 more RT: Reflected Cross-Site Scripting via URL parameters CVE-2026-44227 6.1 MediumMay 20, 2026
• best practical request tracker Stored XSS in Request Tracker CVE-2025-9158 Fix available 5.3 MediumOctober 24, 2025
• bestpractical request tracker Best Practical Request Tracker (RT) before 4.4.9, 5.0.9, and 6.0.2 allows CSV Injection via... CVE-2025-61873 Fix available 2.6 LowOctober 22, 2025
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an... CVE-2025-31501 Fix available 7.2 HighApril 30, 2025
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an... CVE-2025-31500 Fix available 7.2 HighApril 30, 2025
• bestpractical request tracker, rt +1 more Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via... CVE-2025-30087 Fix available 7.2 HighApril 30, 2025
• best practical solutions request tracker Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME CVE-2025-2545 Fix available 2.3 LowApril 30, 2025
• best practical solutions request tracker Information exposure vulnerability in Request Tracker (RT) CVE-2024-3262 Fix available 5.5 MediumApril 4, 2024
• bestpractical request tracker Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a... CVE-2023-45024 Fix available 7.5 HighOctober 30, 2023
• best practical solutions request tracker Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure... CVE-2023-41260 Fix available 7.5 HighOctober 30, 2023
• best practical solutions request tracker Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information... CVE-2023-41259 Fix available 7.5 HighOctober 30, 2023
• bestpractical request tracker Best Practical Request Tracker (RT) before 5.0.3 has an Open Redirect via a ticket search. CVE-2022-25803 Fix available 6.1 MediumJuly 14, 2022
• bestpractical request tracker for incident response Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via... CVE-2022-25801 9.1 CriticalJuly 14, 2022
• bestpractical request tracker for incident response Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via... CVE-2022-25800 9.1 CriticalJuly 14, 2022
• bestpractical request tracker Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted... CVE-2022-25802 Fix available 6.1 MediumJuly 13, 2022
• bestpractical request tracker, debian linux, fedoraproject fedora +2 more Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2... CVE-2021-38562 Fix available 7.5 HighOctober 18, 2021
• bestpractical request tracker, canonical ubuntu linux, debian linux +1 more +3 more The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of... CVE-2018-18898 Fix available 7.5 HighMarch 17, 2019
• bestpractical request tracker The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2... CVE-2017-5944 Fix available 8.8 HighJune 15, 2017
• bestpractical request tracker Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote... CVE-2017-5943 Fix available 8.8 HighJune 15, 2017
• bestpractical request tracker Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use... CVE-2017-5361 Fix available 5.9 MediumJune 15, 2017
• bestpractical request tracker Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before... CVE-2016-6127 Fix available 6.1 MediumJune 15, 2017
• bestpractical request tracker Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT)... CVE-2015-6506 Fix available 4.3 MediumAugust 13, 2015
• bestpractical request tracker Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12... CVE-2015-5475 Fix available 4.3 MediumAugust 13, 2015
• bestpractical request tracker, fedoraproject fedora +1 more RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack... CVE-2015-1464 Fix available 6.4 MediumFebruary 26, 2015
• bestpractical request tracker, debian linux, fedoraproject fedora +2 more RT (aka Request Tracker) 3.8.8 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote... CVE-2015-1165 Fix available 5.0 MediumFebruary 26, 2015
• bestpractical request tracker, debian linux, fedoraproject fedora +2 more The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4... CVE-2014-9472 Fix available 7.1 HighFebruary 26, 2015
• bestpractical request tracker The MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0... CVE-2013-3737 5.0 MediumNovember 16, 2014
• bestpractical rt, email\ \ +1 more Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0... CVE-2014-1474 Fix available 5.0 MediumJuly 15, 2014
• bestpractical request tracker, rt-extension-mobileui +1 more Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension... CVE-2013-3736 4.3 MediumMay 5, 2014
• bestpractical rt Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when... CVE-2013-5587 Fix available 2.6 LowMay 22, 2013
• bestpractical rt Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13,... CVE-2013-3374 Fix available 4.3 MediumMay 22, 2013
• bestpractical rt CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13... CVE-2013-3373 Fix available 5.0 MediumMay 22, 2013
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to... CVE-2013-3372 Fix available 4.3 MediumMay 22, 2013
• bestpractical rt Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x... CVE-2013-3371 Fix available 4.3 MediumMay 22, 2013
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict... CVE-2013-3370 Fix available 6.8 MediumMay 22, 2013
• bestpractical rt Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated... CVE-2013-3369 Fix available 6.0 MediumMay 22, 2013
• bestpractical rt bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to... CVE-2013-3368 Fix available 3.3 LowMay 22, 2013
• bestpractical rt Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom... CVE-2012-4733 Fix available 6.0 MediumMay 22, 2013
• bestpractical request tracker ** DISPUTED ** SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and... CVE-2013-3525 Public exploitDisputed 7.5 HighMay 10, 2013
• bestpractical request tracker Best Practical Solutions RT 3.8.x before 3.8.15 and 4.0.x before 4.0.8, when GnuPG is enabled,... CVE-2012-6581 Fix available 4.3 MediumOctober 26, 2012
• Show olderLoading…