PatchTheCVEsitracker vulnerabilities
Recent CVEs affecting sitracker products. 4 tracked.
sitracker has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-01-02. Highest priority: CVE-2019-20223 (score 39/100).
- CVE-2019-20223 MEDIUM 6.1 DOWNGRADE In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this pa
- CVE-2019-20222 MEDIUM 6.1 DOWNGRADE In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.
- CVE-2019-20221 MEDIUM 6.1 DOWNGRADE In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS
- CVE-2019-20220 MEDIUM 6.1 DOWNGRADE In Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced.php page is
FAQ
How do I fix sitracker vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sitracker being exploited right now?
None of the tracked sitracker CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sitracker CVE should I patch first?
CVE-2019-20223 currently ranks highest (39/100): In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this pa.