b
bestpractical
Security Risk Profile
42
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 73 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 6, 2008 to present
73
Total CVEs
16
Critical+High
0
Exploited
7
Unpatched
Threat Assessment
Avg CVSS
5.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
7
Critical/High
Risk Level
42/100
medium
Severity Distribution
Critical
3High
13Medium
52Low
5Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
20
2
Infoleak
8
3
CSRF
5
4
SQL Injection
4
5
Code Injection
3
Most Affected Products
1. bestpractical RT2885
2. bestpractical Request Tracker413
3. ubuntu/request-tracker423
4. Fedoraproject Fedora9
5. debian/request-tracker58
Recent Vulnerabilities
See more →CVE-2026-44230
CVSS 6.1medium
RT: Reflected Cross-Site Scripting in search results chart
Jul 20, 2026
CVE-2026-44231
CVSS 9.1critical
RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint
Jul 20, 2026
CVE-2026-44229
CVSS 5.4medium
RT: Cross-Site Scripting via inline-served uploaded content
Jul 20, 2026
CVE-2026-44228
CVSS 5.4medium
RT: Stored Cross-Site Scripting via insufficient template escaping
Jul 20, 2026🔧 No Patch
CVE-2026-44227
CVSS 6.1medium
RT: Reflected Cross-Site Scripting via URL parameters
Jul 20, 2026🔧 No Patch
CVE-2026-6841
CVSS 5.1medium
Reflected XSS in Request Tracker
May 21, 2026
CVE-2025-30087
CVSS 7.2high
May 28, 2025🔧 No Patch
CVE-2025-31500
CVSS 7.2high
May 28, 2025🔧 No Patch
CVE-2025-31501
CVSS 7.2high
May 28, 2025🔧 No Patch
CVE-2023-41260
CVSS 7.5high
Nov 3, 2023
Monitor bestpractical in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.