Bestpractical 漏洞

时间轴

类型

Ticket Tracking Software10

产品

Bestpractical RT6
Bestpractical Request Tracker4

修正

Official Fix6
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

易受攻击性

High0
Functional0
Proof-of-Concept2
Unproven2
Not Defined6

访问向量

Not Defined0
Physical0
Local2
Adjacent0
Network8

身份验证

Not Defined0
High0
Low2
None8

用户交互

Not Defined0
Required2
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤54
≤60
≤72
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤52
≤60
≤72
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤42
≤54
≤60
≤72
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k6
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (2): RT (7), Request Tracker (3)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2015-03-096.56.2Bestpractical Request Tracker Session 权限升级Ticket Tracking SoftwareNot DefinedOfficial Fix0.003580.00CVE-2015-1464
2015-03-095.35.3Bestpractical Request Tracker 信息公开Ticket Tracking SoftwareNot DefinedNot Defined0.003930.00CVE-2015-1165
2015-03-097.57.5Bestpractical Request Tracker Email Gateway 拒绝服务Ticket Tracking SoftwareNot DefinedNot Defined0.014160.00CVE-2014-9472
2011-02-174.33.9Bestpractical RT Logging 权限升级Ticket Tracking SoftwareProof-of-ConceptOfficial Fix0.002350.00CVE-2011-1008
2011-02-174.03.6Bestpractical RT Login Form 权限升级Ticket Tracking SoftwareProof-of-ConceptOfficial Fix0.003670.00CVE-2011-1007
2011-01-195.35.2Bestpractical RT 弱加密Ticket Tracking SoftwareNot DefinedOfficial Fix0.004400.00CVE-2011-0009
2009-12-026.56.5Bestpractical RT Session Identifier 弱身份验证Ticket Tracking SoftwareNot DefinedNot Defined0.004910.00CVE-2009-4151
2009-12-026.56.5Bestpractical RT Session Identifier 弱身份验证Ticket Tracking SoftwareNot DefinedNot Defined0.004910.02CVE-2009-3585
2009-11-174.34.3Bestpractical RT 跨网站脚本Ticket Tracking SoftwareNot DefinedNot Defined0.002540.04CVE-2009-3892
2008-08-064.33.8Bestpractical RT StackTrace 拒绝服务Ticket Tracking SoftwareUnprovenOfficial Fix0.003350.00CVE-2008-3502

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!