otrs2 vulnerabilities (Debian)
102 vulnerabilities.
otrs2DebianIn Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6...6.5 Mediumotrs2DebianIn OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up...8.8 Highotrs2DebianCode injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before...8.8 Highotrs2DebianIn the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted...8.8 Highotrs2DebianIn Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0...8.8 Highotrs2DebianIn Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5...8.8 Highotrs2DebianCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16...6.1 Mediumotrs2DebianThe GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before...6.0 Mediumotrs2DebianOTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to...4.3 Mediumotrs2DebianCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.21...3.5 Lowotrs2DebianCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20...4.3 Mediumotrs2DebianMultiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2)...6.8 Mediumotrs2DebianSQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in...7.5 Highotrs2DebianMultiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x...8.8 Highotrs2DebianKernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3...6.5 Mediumotrs2DebianKernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1...6.5 Mediumotrs2DebianCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x...4.3 Mediumotrs2DebianCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x...2.6 Lowotrs2DebianMultiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help...4.3 Mediumotrs2DebianUnspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket...4.0 Mediumotrs2DebianMultiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x...4.3 Mediumotrs2DebianThe (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS)...5.0 Mediumotrs2DebianOpen Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions,...6.0 Mediumotrs2DebianOpen Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which...5.0 Mediumotrs2DebianThe AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not...4.3 Mediumotrs2DebianRace condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS)...4.9 Mediumotrs2DebianOpen Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings...5.0 Mediumotrs2DebianThe ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0...6.5 Mediumotrs2DebianCross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request...3.5 Lowotrs2DebianThe customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0...4.0 Mediumotrs2DebianOpen Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to...3.5 Lowotrs2DebianOpen Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages...4.0 Mediumotrs2Debianinstaller.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field...1.9 Lowotrs2DebianThe S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the...5.0 Mediumotrs2DebianOpen Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into...2.1 Lowotrs2DebianOpen Ticket Request System (OTRS) before 2.4.4 grants ticket access on the basis of single-digit...3.5 Lowotrs2DebianOpen Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows...6.0 Mediumotrs2DebianKernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS)...4.6 Mediumotrs2DebianOpen Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that...4.3 Mediumotrs2DebianKernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2...5.0 Mediumotrs2DebianThe CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote...6.5 Mediumotrs2DebianThe S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0...5.0 Mediumotrs2DebianOpen Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the...6.5 Mediumotrs2DebianKernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a...4.6 Mediumotrs2DebianMultiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) before 2...4.3 Mediumotrs2Debianwebscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to...7.5 Highotrs2DebianCross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when...2.6 Lowotrs2DebianOpen Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly...5.0 Mediumotrs2DebianMultiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x...3.5 Lowotrs2DebianMultiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket...6.5 Medium- Show moreLoading…