GE
Vendor
GestSup
12
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102374 | GE GestSup GestSup | 6.1 | Sep 29 | GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector |
| CVE-2026-102373 | GE GestSup GestSup | 6.5 | Sep 29 | GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter |
| CVE-2026-102372 | GE GestSup GestSup | 6.1 | Sep 29 | GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector |
| CVE-2026-100389 | GE GestSup GestSup | 8.1 | Sep 25 | GestSup before 3.2.62 Remote Code Execution via IMAP Attachment |
| CVE-2026-22196 | GE GestSup GestSup | 8.1 | Jan 9 | GestSup < 3.2.60 SQL Injection in Ticket Creation |
| CVE-2026-22198 | GE GestSup GestSup | 6.1 | Jan 9 | GestSup < 3.2.60 Stored XSS in API Error Logs |
| CVE-2026-22197 | GE GestSup GestSup | 8.1 | Jan 9 | GestSup < 3.2.60 Multiple SQL Injections in Asset List |
| CVE-2026-22195 | GE GestSup GestSup | 8.1 | Jan 9 | GestSup < 3.2.60 SQL Injection in Search Bar |
| CVE-2026-22194 | GE GestSup GestSup | 8.8 | Jan 9 | GestSup <= 3.2.60 CSRF Allows Privileged Actions |
| CVE-2023-52060 | GE Gestsup Gestsup | 4.3 | Feb 13 | A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request |
| CVE-2023-52059 | GE Gestsup Gestsup | 5.4 | Feb 13 | A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text… |
| CVE-2021-31646 | GE Gestsup Gestsup | 9.8 | Apr 26 | Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote) |