RT
Product
rt
48
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 8Low 0
Watch
Add rt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44231 | 9.1 | Jul 20 | RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint Affected: < 5.0.10; >= 6.0.0, < 6.0.3 |
| CVE-2026-41075 | 8.8 | May 22 | RT: SQL injection via entry_aggregator parameter in JSON search Affected: >= 5.0.0, < 5.0.10; >= 6.0.0, < 6.0.3 |
| CVE-2026-41076 | 8.1 | May 22 | RT: LDAP authentication bypass via empty password Affected: < 5.0.10; >= 6.0.0, < 6.0.3 |
| CVE-2026-41074 | 7.1 | May 22 | RT has broken CSRF protection for authenticated users Affected: >= 6.0.0, < 6.0.3 |
| CVE-2026-44230 | 6.1 | Jul 20 | RT: Reflected Cross-Site Scripting in search results chart Affected: >= 5.0.4, < 5.0.10; >= 6.0.0, < 6.0.3 |
| CVE-2026-44227 | 6.1 | Jul 20 | RT: Reflected Cross-Site Scripting via URL parameters Affected: >= 6.0.0, < 6.0.3 |
| CVE-2025-30087 | 6.1 | May 28 | Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL Affected: 4.4.0 before 4.4.8; 5.0.0 before 5.0.8 |
| CVE-2025-31501 | 6.1 | May 28 | Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink Affected: 5.0.0 before 5.0.8 |
| CVE-2025-31500 | 6.1 | May 28 | Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name Affected: 5.0.0 before 5.0.8 |
| CVE-2026-44229 | 5.4 | Jul 20 | RT: Cross-Site Scripting via inline-served uploaded content Affected: >= 6.0.0, < 6.0.3; >= 5.0.0, < 5.0.10 |
| CVE-2026-44228 | 5.4 | Jul 20 | RT: Stored Cross-Site Scripting via insufficient template escaping Affected: >= 6.0.0, < 6.0.3 |
| CVE-2026-41073 | 4.6 | May 22 | RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps Affected: < 5.0.10; >= 6.0.0, < 6.0.3 |
| CVE-2014-1474 | – | Jul 15 | Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption)… Affected: 4.2.0; 4.2.1; 4.2.2 |
| CVE-2013-5587 | – | Aug 23 | Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +25 more |
| CVE-2013-3374 | – | Aug 23 | Unspecified vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +34 more |
| CVE-2013-3373 | – | Aug 23 | CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +34 more |
| CVE-2013-3372 | – | Aug 23 | Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +34 more |
| CVE-2013-3371 | – | Aug 23 | Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via… Affected: 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.1; +34 more |
| CVE-2013-3370 | – | Aug 23 | Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +34 more |
| CVE-2013-3369 | – | Aug 23 | Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions to view the administration pages to execute arbitrary… Affected: 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.1; +34 more |
| CVE-2013-3368 | – | Aug 23 | bin/rt in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +34 more |
| CVE-2012-4733 | – | Aug 23 | Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the… Affected: 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +13 more |
| CVE-2012-4884 | – | Nov 11 | Argument injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to create arbitrary files via unspecified vectors… Affected: 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.1; +34 more |
| CVE-2012-4734 | – | Nov 11 | Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote attackers to conduct a "confused deputy" attack to bypass the CSRF warning protection mechanism and… Affected: 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.1; +34 more |
| CVE-2012-4732 | – | Nov 11 | Cross-site request forgery (CSRF) vulnerability in Request Tracker (RT) 3.8.12 and other versions before 3.8.15, and 4.0.6 and other versions before 4.0.8, allows remote attackers… Affected: 3.8.12; 3.8.13; 3.8.13; 3.8.13; 3.8.14; 3.8.14; +4 more |
| CVE-2012-4730 | – | Nov 11 | Request Tracker (RT) 3.8.x before 3.8.15 and 4.0.x before 4.0.8 allows remote authenticated users with ModifySelf or AdminUser privileges to inject arbitrary email headers and… Affected: 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.0; 3.8.1; +34 more |
| CVE-2011-5093 | – | Jun 4 | Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated users to bypass intended access… Affected: 3.8.12; 4.0.0; 4.0.0; 4.0.0; 4.0.0; 4.0.0; +9 more |
| CVE-2011-5092 | – | Jun 4 | Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges via unspecified vectors, a different… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more |
| CVE-2011-4460 | – | Jun 4 | SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
| CVE-2011-4459 | – | Jun 4 | Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more |
| CVE-2011-4458 | – | Jun 4 | Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute… Affected: 3.6.0; 3.6.0; 3.6.0; 3.6.0; 3.6.0; 3.6.0; +34 more |
| CVE-2011-2085 | – | Jun 4 | Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of… Affected: through 3.8.11; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
| CVE-2011-2084 | – | Jun 4 | Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes of former passwords and (2) ticket correspondence history… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more |
| CVE-2011-2083 | – | Jun 4 | Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attackers to inject arbitrary web script or… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more |
| CVE-2011-2082 | – | Jun 4 | The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more |
| CVE-2011-1686 | – | Apr 22 | Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
| CVE-2011-1690 | – | Apr 22 | Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified… Affected: 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; 3.6.5; +19 more |
| CVE-2011-1689 | – | Apr 22 | Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
| CVE-2011-1688 | – | Apr 22 | Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary… Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.4.0; 3.4.1; +34 more |
| CVE-2011-1687 | – | Apr 22 | Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more |
| CVE-2011-1685 | – | Apr 22 | Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the CustomFieldValuesSources (aka external custom field) option is enabled, allows remote… Affected: 3.8.0; 3.8.1; 3.8.2; 3.8.3; 3.8.4; 3.8.5; +19 more |
| CVE-2011-1007 | – | Feb 28 | Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting… Affected: through 3.8.9; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
| CVE-2011-1008 | – | Feb 28 | Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote… Affected: through 3.8.9; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
| CVE-2011-0009 | – | Jan 25 | Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to… Affected: through 3.8.9; 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; +34 more |
| CVE-2009-4151 | – | Dec 2 | Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web… Affected: 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; 3.0.6; +34 more |
| CVE-2009-3585 | – | Dec 2 | Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 through 3.6.9 and 3.8.x through 3.8.5 allows remote attackers to hijack web… Affected: 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; 3.0.6; +34 more |
| CVE-2009-3892 | – | Nov 17 | Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to… Affected: 3.4.6; 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; +9 more |
| CVE-2008-3502 | – | Aug 6 | Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote authenticated users to cause a denial of service (CPU or memory consumption) via… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +26 more |
Showing 48