Login Request a demo
GE
Product
GestSup
by GestSup · last CVE Sep 29, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 5Medium 6Low 0
Severity
All severities12Critical1High5Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GestSup to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-31646
9.8
1%
Apr 26
Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote)
Affected: before 3.2.10
CVE-2026-22194
8.8
0%
Jan 9
GestSup <= 3.2.60 CSRF Allows Privileged Actions
Affected: through 3.2.60
CVE-2026-100389
8.1
1%
Sep 25
GestSup before 3.2.62 Remote Code Execution via IMAP Attachment
Affected: before 3.2.62
CVE-2026-22196
8.1
0%
Jan 9
GestSup < 3.2.60 SQL Injection in Ticket Creation
Affected: before 3.2.60
CVE-2026-22197
8.1
0%
Jan 9
GestSup < 3.2.60 Multiple SQL Injections in Asset List
Affected: before 3.2.60
CVE-2026-22195
8.1
0%
Jan 9
GestSup < 3.2.60 SQL Injection in Search Bar
Affected: before 3.2.60
CVE-2026-102373
6.5
0%
Sep 29
GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter
Affected: before 3.2.62
CVE-2026-102374
6.1
0%
Sep 29
GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector
Affected: before 3.2.62
CVE-2026-102372
6.1
0%
Sep 29
GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector
Affected: before 3.2.61
CVE-2026-22198
6.1
0%
Jan 9
GestSup < 3.2.60 Stored XSS in API Error Logs
Affected: before 3.2.60
CVE-2023-52059
5.4
0%
Feb 13
A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text…
Affected: before 3.2.46
CVE-2023-52060
4.3
0%
Feb 13
A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request
Affected: before 3.2.46
Showing 12