RT
Product
Request Tracker
33
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 12Low 1
Watch
Add Request Tracker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5944 | 8.8 | Jul 3 | The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +34 more |
| CVE-2017-5943 | 8.8 | Jul 3 | Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information about cross-site request forgery (CSRF)… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +34 more |
| CVE-2023-45024 | 7.5 | Nov 3 | Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder Affected: 5.0.0 before 5.0.5 |
| CVE-2023-41260 | 7.5 | Nov 3 | Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls Affected: before 4.4.7; 5.0.0 before 5.0.5 |
| CVE-2023-41259 | 7.5 | Nov 3 | Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST… Affected: before 4.4.7; 5.0.0 before 5.0.5 |
| CVE-2021-38562 | 7.5 | Oct 18 | Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against… Affected: 4.2.0 before 4.2.17; 4.4.0 before 4.4.5; 5.0.0 before 5.0.2 |
| CVE-2018-18898 | 7.5 | Mar 17 | The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address… Affected: 4.1.13 through 4.4.0 |
Showing 7