Enhancesoft Osticket vulnerabilities

• enhancesoft osticket Session fixation vulnerability in Enhancesoft's osTicket CVE-2026-9507 5.1 MediumJune 16, 2026
• enhancesoft osticket User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to... CVE-2026-26895 5.3 MediumApril 2, 2026
• enhancesoft osticket osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read CVE-2026-22200 Public exploit EPSS 73.6% 8.7 HighJanuary 12, 2026
• enhancesoft osticket A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1... CVE-2025-26241 6.5 MediumMay 5, 2025
• enhancesoft osticket Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows... CVE-2023-46967 6.1 MediumFebruary 20, 2024
• enhancesoft osticket A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows... CVE-2023-27149 4.8 MediumOctober 23, 2023
• enhancesoft osticket A stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft osTicket v1... CVE-2023-27148 4.8 MediumOctober 23, 2023
• enhancesoft osticket A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1... CVE-2021-45811 6.5 MediumSeptember 8, 2023
• enhancesoft osticket A denial of service attack might be launched against the server if an unusually lengthy password ... CVE-2023-30082 7.5 HighJune 14, 2023
• enhancesoft osticket Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2. CVE-2022-31888 8.8 HighApril 5, 2023
• enhancesoft osticket, osticket osticket/osticket +1 more Cross-site Scripting (XSS) - Stored in osticket/osticket CVE-2023-1320 7.1 HighMarch 10, 2023
• enhancesoft osticket, osticket osticket/osticket +1 more Cross-site Scripting (XSS) - Stored in osticket/osticket CVE-2023-1319 4.8 MediumMarch 10, 2023
• enhancesoft osticket, osticket osticket/osticket +1 more Cross-site Scripting (XSS) - Generic in osticket/osticket CVE-2023-1318 5.4 MediumMarch 10, 2023
• enhancesoft osticket, osticket osticket/osticket +1 more Cross-site Scripting (XSS) - Reflected in osticket/osticket CVE-2023-1317 5.4 MediumMarch 10, 2023
• enhancesoft osticket, osticket osticket/osticket +1 more Cross-site Scripting (XSS) - Stored in osticket/osticket CVE-2023-1316 4.5 MediumMarch 10, 2023
• enhancesoft osticket, osticket osticket/osticket +1 more Cross-site Scripting (XSS) - Reflected in osticket/osticket CVE-2023-1315 5.4 MediumMarch 10, 2023
• enhancesoft osticket, osticket osticket/osticket +1 more Cross-site Scripting (XSS) - Reflected in osticket/osticket CVE-2022-4271 8.0 HighDecember 2, 2022
• enhancesoft osticket A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of... CVE-2022-32074 Public exploit 5.4 MediumJuly 13, 2022
• enhancesoft osticket SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows... CVE-2021-42235 9.8 CriticalMay 4, 2022
• enhancesoft osticket Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue... CVE-2020-22609 6.1 MediumJune 28, 2021
• enhancesoft osticket Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name... CVE-2020-22608 6.1 MediumJune 28, 2021
• enhancesoft osticket SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or... CVE-2020-24881 Public exploit EPSS 73.4% 9.8 CriticalNovember 2, 2020
• enhancesoft osticket osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in... CVE-2020-24917 6.1 MediumAugust 30, 2020
• enhancesoft osticket osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo ... CVE-2020-16193 5.4 MediumAugust 26, 2020
• enhancesoft osticket scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category... CVE-2020-14012 5.4 MediumJune 10, 2020
• enhancesoft osticket include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name. CVE-2020-12629 Public exploit 5.4 MediumMay 4, 2020
• enhancesoft osticket An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation... CVE-2019-14748 Public exploit 5.4 MediumAugust 7, 2019
• enhancesoft osticket An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula)... CVE-2019-14749 Public exploit 8.8 HighAugust 7, 2019
• enhancesoft osticket An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in... CVE-2019-14750 Public exploit EPSS 10.9% 6.1 MediumAugust 7, 2019
• enhancesoft osticket Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges... CVE-2019-13397 6.1 MediumJuly 9, 2019
• enhancesoft osticket In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users,... CVE-2019-11537 Public exploit 6.1 MediumApril 25, 2019
• enhancesoft osticket Cross-site scripting (XSS) vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2... CVE-2018-7196 6.1 MediumMarch 27, 2018
• enhancesoft osticket Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords (when an... CVE-2018-7195 8.1 HighMarch 27, 2018
• enhancesoft osticket Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2... CVE-2018-7194 4.9 MediumMarch 27, 2018
• enhancesoft osticket Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1... CVE-2018-7193 6.1 MediumMarch 27, 2018
• enhancesoft osticket Cross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket... CVE-2018-7192 6.1 MediumMarch 27, 2018
• enhancesoft osticket Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows... CVE-2015-1347 4.3 MediumJanuary 23, 2015
• enhancesoft osticket Cross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5... CVE-2015-1176 4.3 MediumJanuary 23, 2015
• enhancesoft osticket Multiple cross-site scripting (XSS) vulnerabilities in osTicket before 1.9.2 allow remote... CVE-2014-4744 4.3 MediumJuly 9, 2014
• enhancesoft osticket ** DISPUTED ** Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read... CVE-2010-4634 Disputed 5.0 MediumDecember 30, 2010
• enhancesoft osticket Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows... CVE-2010-0606 3.5 LowFebruary 11, 2010
• enhancesoft osticket SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote... CVE-2010-0605 Public exploit 7.5 HighFebruary 11, 2010
• enhancesoft osticket SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote... CVE-2009-2361 Public exploit 7.5 HighJuly 8, 2009
• enhancesoft osticket PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to... CVE-2006-5407 7.5 HighOctober 19, 2006
• enhancesoft osticket Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read... CVE-2005-1439 7.5 HighMay 3, 2005
• enhancesoft osticket Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject... CVE-2005-1436 6.8 MediumMay 3, 2005