What’s Vulnerable › Vulnerabilities

CVE-2018-7194

• Severity: medium (CVSS 4.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-03-27 · updated 2026-07-10
• Weakness: CWE-190

Description

Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service (preventing the creation of new tickets) via a large number of digits in the ticket number format setting.

Affected products

• osticket/osticket: through 1.10.1

References

• https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c
• https://blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c

Get alerted when CVE-2018-7194 or the next vulnerability affects your stack