← All advisories

Medium severity5.4NVD Advisory· Published Jun 2, 2025· Updated Jun 17, 2026

CVE-2025-45387

CVE-2025-45387

Description

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Osticket/Osticket3 versions
cpe:2.3:a:osticket:osticket:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:osticket:osticket:*:*:*:*:*:*:*:*range: <1.17.6
- (no CPE)
- (no CPE)range: <1.17.6, <1.18.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.