VDB
DEBIAN-CVE-2015-5475
DEBIAN-CVE-2015-5475
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights management pages.
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | request-tracker4 | 0, 0, 0 |
| Debian:11 | request-tracker4 | 0, 0, 0 |
Timeline
- Aug 14, 2015 CVE Published
- Apr 28, 2026 CVE Updated