Known Vulnerabilities for products from Osticket
Listed below are 12 of the newest known vulnerabilities associated with the vendor "Osticket".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-36214 json | Not Provided | 2026-07-14 | 2026-07-15 | |
| CVE-2026-26895 json | Not Provided | 2026-04-02 | 2026-07-05 | |
| CVE-2026-22200 json | Not Provided | 2026-01-12 | 2026-07-14 | |
| CVE-2026-14871 json | Not Provided | 2026-07-17 | 2026-07-17 | |
| CVE-2026-9507 json | Not Provided | 2026-06-16 | 2026-06-16 | |
| CVE-2026-8194 json | Not Provided | 2026-05-09 | 2026-05-09 | |
| CVE-2021-45811 json | Not Provided | 2023-09-08 | 2026-07-09 | |
| CVE-2017-15580 json | osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly valida... | Not Provided | 2017-10-23 | 2025-04-20 |
| CVE-2017-15362 json | osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php... | 6.1 - MEDIUM | 2017-10-16 | 2017-11-07 |
| CVE-2017-14396 json | In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a para... | 9.8 - CRITICAL | 2017-09-12 | 2017-09-21 |
| CVE-2010-0606 json | Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to... | Not Provided | 2010-02-11 | 2026-07-10 |
| CVE-2010-0605 json | SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" p... | Not Provided | 2010-02-11 | 2026-07-10 |
| CVE-2006-6733 json | Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to inject ... | Not Provided | 2006-12-26 | 2026-04-23 |
| CVE-2005-2154 json | PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote atta... | Not Provided | 2005-07-06 | 2025-04-03 |
| CVE-2005-2153 json | SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitra... | Not Provided | 2005-07-06 | 2025-04-03 |
| CVE-2005-1438 json | PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the... | Not Provided | 2005-05-03 | 2025-04-03 |
| CVE-2005-1437 json | Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id pa... | Not Provided | 2005-05-03 | 2025-04-03 |
| CVE-2004-0614 json | osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attac... | Not Provided | 2004-12-06 | 2025-04-03 |
| CVE-2004-0613 json | osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request tha... | Not Provided | 2004-12-06 | 2025-04-03 |
Known software with vulnerabilities from Osticket
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Osticket | Osticket | 1.0 |