Best Practical Vulnerabilità

Sequenza temporale

Genere

Prodotto

Best Practical RT28
Best Practical Request Tracker10
Best Practical Solutions Request Tracker4
Best Practical RT for Incident Response2
Best Practical rt1

Contromisure

Official Fix33
Temporary Fix0
Workaround0
Unavailable2
Not Defined11

Sfruttabilità

High2
Functional0
Proof-of-Concept1
Unproven0
Not Defined43

Accesso al vettore

Not Defined0
Physical0
Local2
Adjacent4
Network40

Autenticazione

Not Defined0
High0
Low17
None29

Interazione dell'utente

Not Defined0
Required23
None23

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤42
≤519
≤611
≤78
≤85
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤42
≤520
≤615
≤75
≤83
≤90
≤100

VulDB

≤10
≤20
≤31
≤44
≤517
≤614
≤77
≤83
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤81
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k13
<2k20
<5k13
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k46
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (5): RT (28), RTFM (1), RT for Incident Response (2), Request Tracker (14), rt (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
04/04/20244.44.4Best Practical Solutions Request Tracker rivelazione di un 'informazioneTicket Tracking SoftwareNot DefinedNot Defined0.000430.04CVE-2024-3262
14/07/20224.84.7Best Practical Request Tracker Attachment cross site scriptingTicket Tracking SoftwareNot DefinedOfficial Fix0.000840.05CVE-2022-25802
14/07/20225.85.7Best Practical Request Tracker Ticket Search RedirectTicket Tracking SoftwareNot DefinedOfficial Fix0.000730.03CVE-2022-25803
14/07/20227.37.2Best Practical RT for Incident Response Scripted Action Tools escalazione di privilegiTicket Tracking SoftwareNot DefinedOfficial Fix0.001300.00CVE-2022-25801
14/07/20227.37.2Best Practical RT for Incident Response Whois Lookup Tool escalazione di privilegiTicket Tracking SoftwareNot DefinedOfficial Fix0.001300.00CVE-2022-25800
18/10/20212.62.5Best Practical Request Tracker Auth.pm rivelazione di un 'informazioneTicket Tracking SoftwareNot DefinedOfficial Fix0.002830.02CVE-2021-38562
21/03/20196.46.3Best Practical Request Tracker email-ingestion escalazione di privilegiTicket Tracking SoftwareNot DefinedOfficial Fix0.012290.00CVE-2018-18898
15/07/20145.35.3Best Practical RT List denial of serviceTicket Tracking SoftwareNot DefinedNot Defined0.006610.00CVE-2014-1474
05/05/20144.34.1Best Practical Request Tracker cross site scriptingTicket Tracking SoftwareHighOfficial Fix0.002200.02CVE-2013-3736
23/08/20134.34.1Best Practical RT cross site scriptingTicket Tracking SoftwareNot DefinedOfficial Fix0.001670.00CVE-2013-5587

36 non vengono visualizzate più voci

Do you know our Splunk app?

Download it now for free!