support incident tracker vulnerabilities and fixes

Recent CVEs affecting support incident tracker, with upgrade or downgrade steps. 5 tracked.

Also searched as: supportincidenttracker.

support incident tracker has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-06-26. Highest priority: CVE-2020-15308 (score 51/100).

• CVE-2020-15308 HIGH 7.2 DOWNGRADE Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site
• CVE-2019-20223 MEDIUM 6.1 DOWNGRADE In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this pa
• CVE-2019-20222 MEDIUM 6.1 DOWNGRADE In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.
• CVE-2019-20221 MEDIUM 6.1 DOWNGRADE In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS
• CVE-2019-20220 MEDIUM 6.1 DOWNGRADE In Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced.php page is

FAQ

How do I fix support incident tracker vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is support incident tracker being exploited right now?

None of the tracked support incident tracker CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which support incident tracker CVE should I patch first?

CVE-2020-15308 currently ranks highest (51/100): Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site.

RSS feed for support incident tracker · ← Back to latest CVEs