MA
Product
mantisbt
140
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 16Medium 65Low 1
Watch
Add mantisbt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30849 | 9.8 | Mar 23 | MantisBT SOAP API has an authentication bypass vulnerability on MySQL Affected: < 2.28.1 |
| CVE-2019-15074 | 9.6 | Aug 21 | The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if CSP settings… Affected: 2.13.0 through 2.21.1 |
| CVE-2026-47156 | 9.3 | Sep 9 | MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator Affected: < 2.28.4 |
| CVE-2025-47776 | 9.1 | Nov 4 | MantisBT: Authentication bypass for some passwords due to PHP type juggling Affected: < 2.27.2 |
Showing 4