osTicket vulnerabilities

9 published CVEs name osTicket among the affected products.

Newest CVEs

CVE-2026-14871
osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure
osTicket · osTicket
High7.1
CVE-2026-36214
osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vulnerable to a stored XSS due to a vulnerable Bootstrap Tooltip component and…
osTicket · osTicket
Medium6.4
CVE-2023-1320
Cross-site Scripting (XSS) - Stored in osticket/osticket
osticket · osticket/osticket
High7.1
CVE-2023-1319
Cross-site Scripting (XSS) - Stored in osticket/osticket
osticket · osticket/osticket
Medium4.8
CVE-2023-1318
Cross-site Scripting (XSS) - Generic in osticket/osticket
osticket · osticket/osticket
Medium5.4
CVE-2023-1317
Cross-site Scripting (XSS) - Reflected in osticket/osticket
osticket · osticket/osticket
Medium5.4
CVE-2023-1316
Cross-site Scripting (XSS) - Stored in osticket/osticket
osticket · osticket/osticket
Medium4.5
CVE-2023-1315
Cross-site Scripting (XSS) - Reflected in osticket/osticket
osticket · osticket/osticket
Medium5.4
CVE-2022-4271
Cross-site Scripting (XSS) - Reflected in osticket/osticket
osticket · osticket/osticket
High8.0