Sign in Free assessment

GestSup records

8 published records for vendor gestsup.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 50%
Median publish → KEV: No record has entered KEV

Records by year

21
24
26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-31646No exploit	Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote).gestsup · gestsup · CWE-307 Pre-auth	Critical9.8	—	1.3%	Apr 26, 2021
35Monitor	CVE-2026-22194No exploit	GestSup <= 3.2.60 CSRF Allows Privileged Actionsgestsup · gestsup · CWE-352 Pre-auth CSRF	High8.9	—	0.2%	Jan 9, 2026
30Monitor	CVE-2026-22197No exploit	GestSup < 3.2.60 Multiple SQL Injections in Asset Listgestsup · gestsup · CWE-89 SQL injection	High7.5	—	0.3%	Jan 9, 2026
30Monitor	CVE-2026-22195No exploit	GestSup < 3.2.60 SQL Injection in Search Bargestsup · gestsup · CWE-89 SQL injection	High7.7	—	0.3%	Jan 9, 2026
30Monitor	CVE-2026-22196No exploit	GestSup < 3.2.60 SQL Injection in Ticket Creationgestsup · gestsup · CWE-89 SQL injection	High7.7	—	0.3%	Jan 9, 2026
21Monitor	CVE-2023-52059No exploit	A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payloagestsup · gestsup · CWE-79 RCE XSS	Medium5.4	—	0.4%	Feb 12, 2024
20Monitor	CVE-2026-22198No exploit	GestSup < 3.2.60 Stored XSS in API Error Logsgestsup · gestsup · CWE-79 XSS	Medium5.1	—	0.3%	Jan 9, 2026
17Monitor	CVE-2023-52060No exploit	A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request.gestsup · gestsup · CWE-352 Pre-auth CSRF	Medium4.3	—	0.3%	Feb 12, 2024

CVE-2021-31646
39Monitor
Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote).
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
gestsup · gestsupApr 26, 2021
CVE-2026-22194
35Monitor
GestSup <= 3.2.60 CSRF Allows Privileged Actions
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
- CSRF
gestsup · gestsupJan 9, 2026
CVE-2026-22197
30Monitor
GestSup < 3.2.60 Multiple SQL Injections in Asset List
HighCVSS 7.5No exploitEPSS 0%
- SQL injection
gestsup · gestsupJan 9, 2026
CVE-2026-22195
30Monitor
GestSup < 3.2.60 SQL Injection in Search Bar
HighCVSS 7.7No exploitEPSS 0%
- SQL injection
gestsup · gestsupJan 9, 2026
CVE-2026-22196
30Monitor
GestSup < 3.2.60 SQL Injection in Ticket Creation
HighCVSS 7.7No exploitEPSS 0%
- SQL injection
gestsup · gestsupJan 9, 2026
CVE-2023-52059
21Monitor
A cross-site scripting (XSS) vulnerability in Gestsup v3.2.46 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa
MediumCVSS 5.4No exploitEPSS 0%
- RCE
- XSS
gestsup · gestsupFeb 12, 2024
CVE-2026-22198
20Monitor
GestSup < 3.2.60 Stored XSS in API Error Logs
MediumCVSS 5.1No exploitEPSS 0%
- XSS
gestsup · gestsupJan 9, 2026
CVE-2023-52060
17Monitor
A Cross-Site Request Forgery (CSRF) in Gestsup v3.2.46 allows attackers to arbitrarily edit user profile information via a crafted request.
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
gestsup · gestsupFeb 12, 2024