Skip to contentOtrs vulnerabilities
Newest
- otrsAn issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a...CVE-2018-10198Fix available4.3 Medium
- otrs** DISPUTED ** In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5...CVE-2018-7567Disputed7.2 High
- otrs, debian linux +1 moreOpen Ticket Request System (OTRS) 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0...CVE-2017-17476Fix available8.8 High
- otrs, debian linux +1 moreIn Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6...CVE-2017-16854Fix available6.5 Medium
- otrs, debian linux +1 moreIn OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up...CVE-2017-16921Public exploitFix availableEPSS 19.9%8.8 High
- otrs, debian linux +1 moreCode injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before...CVE-2017-16664Fix available8.8 High
- otrs, debian linux +1 moreIn the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted...CVE-2017-15864Fix available8.8 High
- otrsIn Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0...CVE-2017-14635Fix available8.8 High
- otrs, debian linux +1 moreIn Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5...CVE-2017-9324Fix available8.8 High
- otrsOpen Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as...CVE-2017-92996.1 Medium
- otrsCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16...CVE-2016-9139Fix available6.1 Medium
- otrs faqMultiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and...CVE-2016-5843Fix available9.4 Critical
- otrs help deskThe GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before...CVE-2014-9324Fix available6.0 Medium
- otrs, opensuse +1 moreOTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to...CVE-2014-2554Fix available4.3 Medium
- otrsCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.21...CVE-2014-2553Fix available3.5 Low
- otrsCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20...CVE-2014-1695Public exploitFix available4.3 Medium
- otrsMultiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2)...CVE-2014-1694Fix available6.8 Medium
- otrsSQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in...CVE-2014-1471Fix available7.5 High
- otrs, otrs itsm +1 moreMultiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x...CVE-2013-4717Fix available8.8 High
- otrsKernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3...CVE-2013-4088Fix available6.5 Medium
- otrs, otrs itsm +1 moreKernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1...CVE-2013-3551Fix available6.5 Medium
- otrsCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x...CVE-2012-4751Public exploitFix available4.3 Medium
- otrs, otrs itsm +1 moreCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x...CVE-2012-4600Public exploitFix available2.6 Low
- otrs, otrs itsm +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help...CVE-2012-2582Public exploitFix available4.3 Medium
- otrsUnspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket...CVE-2011-2746Fix available4.0 Medium
- otrs iphonehandle, otrs +1 moreThe iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System ...CVE-2011-23856.5 Medium
- otrsMultiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x...CVE-2011-1518Fix available4.3 Medium
- otrsThe (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS)...CVE-2011-1433Fix available5.0 Medium
- otrsOpen Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions,...CVE-2010-4768Fix available6.0 Medium
- otrsOpen Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which...CVE-2010-4767Fix available5.0 Medium
- otrsThe AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not...CVE-2010-4766Fix available4.3 Medium
- otrsRace condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS)...CVE-2010-4765Fix available4.9 Medium
- otrsOpen Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings...CVE-2010-4764Fix available5.0 Medium
- otrsThe ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0...CVE-2010-4763Fix available6.5 Medium
- otrsCross-site scripting (XSS) vulnerability in the rich-text-editor component in Open Ticket Request...CVE-2010-4762Fix available3.5 Low
- otrsThe customer-interface ticket-print dialog in Open Ticket Request System (OTRS) before 3.0.0...CVE-2010-4761Fix available4.0 Medium
- otrsOpen Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to...CVE-2010-4760Fix available3.5 Low
- otrsOpen Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages...CVE-2010-4759Fix available4.0 Medium
- otrsinstaller.pl in Open Ticket Request System (OTRS) before 3.0.3 has an Inbound Mail Password field...CVE-2010-4758Fix available1.9 Low
- otrsThe S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the...CVE-2009-5057Fix available5.0 Medium
- otrsOpen Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into...CVE-2009-5056Fix available2.1 Low
- otrsOpen Ticket Request System (OTRS) before 2.4.4 grants ticket access on the basis of single-digit...CVE-2009-5055Fix available3.5 Low
- otrsOpen Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows...CVE-2008-7283Fix available6.0 Medium
- otrsKernel/Output/HTML/CustomerNewTicketQueueSelectionGeneric.pm in Open Ticket Request System (OTRS)...CVE-2008-7282Fix available4.6 Medium
- otrsOpen Ticket Request System (OTRS) before 2.2.7 sends e-mail containing a Bcc header field that...CVE-2008-7281Fix available4.3 Medium
- otrsKernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2...CVE-2008-7280Fix available5.0 Medium
- otrsThe CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote...CVE-2008-7279Fix available6.5 Medium
- otrsThe S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0...CVE-2008-7278Fix available5.0 Medium
- otrsOpen Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the...CVE-2008-7277Fix available6.5 Medium
- otrsKernel/System/Web/Request.pm in Open Ticket Request System (OTRS) before 2.3.2 creates a...CVE-2008-7276Fix available4.6 Medium
- Show moreLoading…