GestSup vulnerabilities
9 published CVEs name GestSup among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102374
GestSup before 3.2.62 Stored XSS via Double-Decoded Email Subject in OAuth IMAP Connector
GestSup · GestSup
Medium5.3 - CVE-2026-102373
GestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit Parameter
GestSup · GestSup
High7.1 - CVE-2026-102372
GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector
GestSup · GestSup
Medium5.3 - CVE-2026-100389
GestSup before 3.2.62 Remote Code Execution via IMAP Attachment
GestSup · GestSup
Critical9.2 - CVE-2026-22196
GestSup < 3.2.60 SQL Injection in Ticket Creation
GestSup · GestSup
High7.7 - CVE-2026-22198
GestSup < 3.2.60 Stored XSS in API Error Logs
GestSup · GestSup
Medium5.1 - CVE-2026-22197
GestSup < 3.2.60 Multiple SQL Injections in Asset List
GestSup · GestSup
High7.5 - CVE-2026-22195
GestSup < 3.2.60 SQL Injection in Search Bar
GestSup · GestSup
High7.7 - CVE-2026-22194
GestSup <= 3.2.60 CSRF Allows Privileged Actions
GestSup · GestSup
High8.9