CVE-2025-45387

MEDIUM 5.4CVE-2025-45387 · Published 02/06/2025 · updated 17/06/2026

In short

CVE-2025-45387 is a MEDIUM (CVSS 5.4) vulnerability affecting osticket (osticket).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.4% of all vulnerabilities.
Fix: update to 1.18.2, 1.17.6 or later.

Package	Affected versions	Patched versions
osticket osticket	`≥ 1.18, < 1.18.2< 1.17.6`	`1.18.21.17.6`

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 1.18, < 1.18.2< 1.17.6

1.18.21.17.6

More vulnerabilities in osticket

See all →