Product by Best Practical
RT
33 known vulnerabilities in RT (Best Practical), 0 of them actively exploited (CISA KEV).
Key figures
33
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2017-5944 | RT: Code Execution | 8.8 | |
| High | CVE-2018-18898 | RT: Denial of Service | 7.5 | |
| High | CVE-2021-38562 | RT: Information Disclosure | 7.5 | |
| Medium | CVE-2017-5361 | RT: security vulnerability | 5.9 | |
| High | CVE-2017-5943 | RT: Cross-Site Request Forgery (CSRF) | 8.8 | |
| High | CVE-2023-41259 | RT: Information Disclosure | 7.5 | |
| High | CVE-2023-41260 | RT: Information Disclosure | 7.5 | |
| Critical | CVE-2026-44231 | RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint | 9.1 | |
| Medium | CVE-2016-6127 | RT: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2023-45024 | RT: Information Disclosure | 7.5 | |
| Not rated | CVE-2014-9472 | RT: Denial of Service | — | |
| Not rated | CVE-2013-3525 | RT: SQL Injection | — | |
| Medium | CVE-2022-25802 | RT: Cross-Site Scripting (XSS) | 6.1 | |
| Not rated | CVE-2015-1165 | RT: security vulnerability | — | |
| Medium | CVE-2026-44227 | RT: Reflected Cross-Site Scripting via URL parameters | 6.1 | |
| Not rated | CVE-2015-6506 | RT: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2015-5475 | RT: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2015-1464 | RT: security vulnerability | — | |
| Medium | CVE-2026-44230 | RT: Reflected Cross-Site Scripting in search results chart | 6.1 | |
| High | CVE-2025-30087 | Best Practical RT: Cross-site Scripting | 7.2 | |
| Medium | CVE-2026-44228 | RT: Stored Cross-Site Scripting via insufficient template escaping | 5.4 | |
| Medium | CVE-2026-6841 | Reflected XSS in Request Tracker | 6.1 | |
| Medium | CVE-2022-25803 | RT: Open Redirect | 6.1 | |
| Medium | CVE-2026-44229 | RT: Cross-Site Scripting via inline-served uploaded content | 5.4 | |
| High | CVE-2025-31500 | Best Practical RT: Cross-site Scripting | 7.2 |