osTicket vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20236
3. 20262

Newest CVEs

• CVE-2026-14871

  osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure

  osTicket · osTicket

  High7.1
• CVE-2026-36214

  osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and…

  osTicket · osTicket

  Medium6.4
• CVE-2023-1320

  Cross-site Scripting (XSS) - Stored in osticket/osticket

  osticket · osticket/osticket

  High7.1
• CVE-2023-1319

  Cross-site Scripting (XSS) - Stored in osticket/osticket

  osticket · osticket/osticket

  Medium4.8
• CVE-2023-1318

  Cross-site Scripting (XSS) - Generic in osticket/osticket

  osticket · osticket/osticket

  Medium5.4
• CVE-2023-1317

  Cross-site Scripting (XSS) - Reflected in osticket/osticket

  osticket · osticket/osticket

  Medium5.4
• CVE-2023-1316

  Cross-site Scripting (XSS) - Stored in osticket/osticket

  osticket · osticket/osticket

  Medium4.5
• CVE-2023-1315

  Cross-site Scripting (XSS) - Reflected in osticket/osticket

  osticket · osticket/osticket

  Medium5.4
• CVE-2022-4271

  Cross-site Scripting (XSS) - Reflected in osticket/osticket

  osticket · osticket/osticket

  High8.0