CVE-2017-18023: Officetracker

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI.

Affected products

• Officetracker Officetracker: version 11.2.5 only

Published 2018-01-10. Last modified 2026-06-17.