Login Request a demo
MA
Vendor
mantisbt
3 products with CVEs on record
145
CVEs
0
On KEV
0
New 30D
Products
MA
mantisbt
mantisbt
9.8
140 CVEs0 on KEV0 new
SI
Source Integration
Mantisbt
6.1
4 CVEs0 on KEV0 new
LC
Linked Custom Fields
Mantisbt
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-47156
MA
mantisbt
mantisbt
9.3
1%
Sep 9MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator
CVE-2026-42071
MA
mantisbt
mantisbt
7.2
0%
May 28MantisBT: Private Bugnote Attachment Content Leak via REST API
CVE-2026-42070
MA
mantisbt
mantisbt
5.3
0%
May 28MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API
CVE-2026-44655
MA
mantisbt
mantisbt
8.6
0%
May 28MantisBT: Stored XSS on Move Attachments Admin Page
CVE-2026-41897
MA
mantisbt
mantisbt
5.3
0%
May 28MantisBT: Reflected XSS in Rendering Dynamic Custom Textarea Field
CVE-2026-44657
MA
mantisbt
mantisbt
7.5
0%
May 28MantisBT: Stored XSS in File Download
CVE-2026-40607
MA
mantisbt
mantisbt
7.5
0%
May 22MantisBT is Vulnerable to Stored XSS Through its Saved-Filter Owner Column
CVE-2026-40598
MA
mantisbt
mantisbt
6.9
0%
May 22MantisBT has Potential Referer-Based Reflected HTML Injection / XSS in Tag Update Page
CVE-2026-40597
MA
mantisbt
mantisbt
7.6
0%
May 22MantisBT has a Content Security Policy bypass via attachments
CVE-2026-40596
MA
mantisbt
mantisbt
7.2
0%
May 22MantisBT is vulnerable to XSS and potential account takeover via user font family preference update
CVE-2026-39960
MA
mantisbt
mantisbt
5.4
0%
May 20MantisBT is Vulnerable to Stored XSS through Custom Field Textarea Values
CVE-2026-34970
MA
mantisbt
mantisbt
5.3
0%
May 19MantisBT Bugnote Revision Page Leaks Private Issue Metadata After Issue Access Is Revoked
CVE-2026-34754
MA
mantisbt
mantisbt
4.3
0%
May 19MantisBT allows unauthorized users to upload attachments to restricted issues via REST API
CVE-2026-34744
MA
mantisbt
mantisbt
5.3
0%
May 19MantisBT authorization bypass allows continued access to self-uploaded attachments on private issues
CVE-2026-34579
MA
mantisbt
mantisbt
5.3
0%
May 19MantisBT has an authorization bypass via private issue monitoring
CVE-2026-34463
MA
mantisbt
mantisbt
8.6
0%
May 19MantisBT has Stored HTML Injection/XSS via Clone Issue Form
CVE-2026-34390
MA
mantisbt
mantisbt
5.1
0%
May 19MantisBT: Privilege Escalation from Manager to Administrator
CVE-2026-33052
MA
mantisbt
mantisbt
5.3
0%
May 19MantisBT: Authorization Bypass in Global Profile Creation
CVE-2026-33548
MA
mantisbt
mantisbt
6.1
0%
Mar 23MantisBT has Stored HTML Injection / XSS when displaying Tags in Timeline
CVE-2026-33517
MA
mantisbt
mantisbt
6.1
0%
Mar 23MantisBT Vulnerable to Stored HTML Injection in Tag Delete Confirmation
CVE-2026-30849
MA
mantisbt
mantisbt
9.8
2%
Mar 23MantisBT SOAP API has an authentication bypass vulnerability on MySQL
CVE-2025-62520
MA
mantisbt
mantisbt
4.3
0%
Nov 4MantisBT unauthorized disclosure of private project column configuration
CVE-2025-55155
MA
mantisbt
mantisbt
5.4
0%
Nov 4MantisBT: Authentication bypass for some passwords due to PHP type juggling
CVE-2025-47776
MA
mantisbt
mantisbt
9.1
0%
Nov 4MantisBT: Authentication bypass for some passwords due to PHP type juggling
CVE-2025-46556
MA
mantisbt
mantisbt
7.5
0%
Nov 4MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Length
CVE-2024-45792
MA
mantisbt
mantisbt
6.5
1%
Sep 30MantisBT vulnerable to information disclosure with user profiles
CVE-2024-34081
MA
mantisbt
mantisbt
4.8
1%
May 13MantisBT Cross-site Scripting vulnerability
CVE-2024-34080
MA
mantisbt
mantisbt
5.3
1%
May 13MantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
CVE-2024-34077
MA
mantisbt
mantisbt
7.3
1%
May 13MantisBT user account takeover in the signup/reset password process
CVE-2024-23830
MA
mantisbt
mantisbt
8.3
1%
Feb 20MantisBT Host Header Injection vulnerability
CVE-2023-49802
LC
Linked Custom Fields
Mantisbt
6.1
1%
Dec 11The LinkedCustomFields plugin for MantisBT allows users to link values between two custom fields, creating linked drop-downs
CVE-2023-44394
MA
Mantisbt
Mantisbt
4.3
1%
Oct 16MantisBT is an open source bug tracker
CVE-2023-22476
MA
Mantisbt
Mantisbt
4.3
1%
Feb 23Mantis Bug Tracker (MantisBT) is an open source issue tracker
CVE-2022-33910
MA
Mantisbt
Mantisbt
5.4
1%
Jun 24An XSS vulnerability in MantisBT before 2.25.5 allows remote attackers to attach crafted SVG documents to issue reports or bugnotes
CVE-2022-28508
MA
Mantisbt
Mantisbt
6.1
5%
May 4An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2
CVE-2021-43257
MA
Mantisbt
Mantisbt
7.8
1%
Apr 14Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens…
CVE-2022-26144
MA
Mantisbt
Mantisbt
6.1
1%
Apr 13An XSS issue was discovered in MantisBT before 2.25.3
CVE-2021-33557
MA
Mantisbt
Mantisbt
6.1
2%
Jun 17An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2
CVE-2009-20001
MA
Mantisbt
Mantisbt
8.1
1%
Mar 7An issue was discovered in MantisBT before 2.24.5
CVE-2020-35571
MA
Mantisbt
Mantisbt
6.1
1%
Feb 22An issue was discovered in MantisBT through 2.24.3
CVE-2020-29605
MA
Mantisbt
Mantisbt
4.3
1%
Jan 29An issue was discovered in MantisBT before 2.24.4
CVE-2020-29604
MA
Mantisbt
Mantisbt
6.5
1%
Jan 29An issue was discovered in MantisBT before 2.24.4
CVE-2020-29603
MA
Mantisbt
Mantisbt
4.3
1%
Jan 29In manage_proj_edit_page.php in MantisBT before 2.24.4, any unprivileged logged-in user can retrieve Private Projects' names via the manage_proj_edit_page.php project_id…
CVE-2020-36192
SI
Source Integration
Mantisbt
5.3
1%
Jan 18An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT
CVE-2020-28413
MA
Mantisbt
Mantisbt
6.5
5%
Dec 30In MantisBT 2.24.3, SQL Injection can occur in the parameter "access" of the mc_project_get_users function through the API SOAP
CVE-2020-35849
MA
Mantisbt
Mantisbt
7.5
2%
Dec 30An issue was discovered in MantisBT before 2.24.4
CVE-2020-25830
MA
Mantisbt
Mantisbt
4.8
2%
Sep 30An issue was discovered in MantisBT before 2.24.3
CVE-2020-25781
MA
Mantisbt
Mantisbt
4.3
1%
Sep 30An issue was discovered in file_download.php in MantisBT before 2.24.3
CVE-2020-25288
MA
Mantisbt
Mantisbt
4.8
1%
Sep 30An issue was discovered in MantisBT before 2.24.3
CVE-2020-16266
MA
Mantisbt
Mantisbt
5.4
1%
Aug 12An XSS issue was discovered in MantisBT before 2.24.2
CVE-2019-15539
MA
Mantisbt
Mantisbt
6.1
1%
Mar 19The proj_doc_edit_page.php Project Documentation feature in MantisBT before 2.21.3 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if…
CVE-2020-8981
SI
Source Integration
Mantisbt
6.1
1%
Feb 13A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT
CVE-2009-2802
MA
Mantisbt
Mantisbt
6.1
1%
Nov 9MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types
CVE-2013-1811
MA
Mantisbt
Mantisbt
4.3
1%
Nov 7An access control issue in MantisBT before 1.2.13 allows users with "Reporter" permissions to change any issue to "New"
CVE-2013-1934
MA
Mantisbt
Mantisbt
5.4
1%
Oct 31A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject…
CVE-2013-1932
MA
Mantisbt
Mantisbt
5.4
1%
Oct 31A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web…
CVE-2013-1931
MA
Mantisbt
Mantisbt
6.1
2%
Oct 31A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version
CVE-2013-1930
MA
Mantisbt
Mantisbt
4.3
1%
Oct 31MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues
CVE-2019-15715
MA
Mantisbt
Mantisbt
7.2
30%
Oct 9MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution
CVE-2019-15074
MA
Mantisbt
Mantisbt
9.6
2%
Aug 21The Timeline feature in my_view_page.php in MantisBT through 2.21.1 has a stored cross-site scripting (XSS) vulnerability, allowing execution of arbitrary code (if CSP settings…