Skip to contentOtrs vulnerabilities
Newest
- otrs, otrs ag ((otrs)) community edition +1 moreUnautorized listing of the customer user emailsCVE-2021-21443Fix available3.5 Low
- otrs time accountingXSS vulnerability in Time AccountingCVE-2021-214424.5 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreSupport Bundle includes S/Mime and PGP keysCVE-2021-21440Fix available5.2 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreXSS in the ticket overview screensCVE-2021-21441Fix available7.5 High
- otrs, otrs ag ((otrs)) community edition +1 morePossible DoS attack using a special crafted URL in email bodyCVE-2021-21439Fix available6.5 Medium
- otrs faq, otrs +1 moreFAQ articles are shown to users without permissionCVE-2021-214383.5 Low
- otrs itsmconfigurationmanagement, otrscisincustomerfrontend +1 moreConfig Items are shown to users without permissionCVE-2021-214373.5 Low
- otrs ag otrscisincustomerfrontend, otrs cis in customer frontend +1 moreAgent is able to link customer's Config Items without permissionCVE-2021-214363.5 Low
- otrsInformation exposure in PDF exportCVE-2021-214355.7 Medium
- checkbox surveyXSS in Survey ModuleCVE-2021-214343.5 Low
- otrs ag otrsticketforms, otrs ticket forms +1 moreDynamic templates reveal sensitive data when OTRS tags are usedCVE-2020-17794.3 Medium
- otrsBypassing user account validationCVE-2020-17784.1 Medium
- otrsAgent names disclosed in chat featureCVE-2020-17774.3 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreInvalidating or changing user does not invalidate sessionCVE-2020-1776Fix available3.5 Low
- otrsInformation disclosure in external interfaceCVE-2020-17753.5 Low
- otrs, otrs ag ((otrs)) community edition, debian linux +2 moreInformation disclosureCVE-2020-1774Fix available4.5 Medium
- otrs, otrs ag ((otrs)) community edition +1 moreSession / Password / Password token leakCVE-2020-1773Fix available7.3 High
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation DisclosureCVE-2020-1772Fix available6.5 Medium
- otrs, otrs ag ((otrs)) community edition +1 morePossible XSS in Customer user address bookCVE-2020-1771Fix available4.6 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation disclosure in support bundle filesCVE-2020-1770Fix available2.4 Low
- otrs, otrs ag ((otrs)) community edition, opensuse backports sle +1 more +3 moreAutocomplete in the form login screensCVE-2020-1769Fix available3.5 Low
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community...CVE-2019-16375Fix available5.4 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8. A customer user...CVE-2019-134574.3 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.0 through 7.0.6. An attacker who...CVE-2019-100654.3 Medium
- otrs faq, itsm, opensuse +2 moreA Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7...CVE-2013-2637Public exploit6.1 Medium
- otrsExternal Interface does not invalidate sessionCVE-2020-17685.4 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 morePossible to send drafted messages as wrong agentCVE-2020-1767Fix available3.5 Low
- otrs, otrs ag ((otrs)) community edition, debian linux +2 moreImproper handling of uploaded inline imagesCVE-2020-1766Fix available2.0 Low
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreSpoofing of From field in several screensCVE-2020-1765Fix available3.5 Low
- otrs, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community...CVE-2019-18179Fix available3.5 Low
- otrsDenial of serviceCVE-2019-18180Fix available5.3 Medium
- otrs faq, help desk, itsm +2 more +4 moreAn Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM...CVE-2013-2625Fix available6.5 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community...CVE-2019-13458Fix available2.7 Low
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) Community Edition 5.0.x through 5.0...CVE-2019-12746Fix available6.5 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully...CVE-2018-11563Fix available4.6 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community...CVE-2019-12497Fix available5.3 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community...CVE-2019-12248Fix available4.3 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.x before 7.0.5. An attacker who is...CVE-2019-97533.5 Low
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition...CVE-2019-10066Fix available5.4 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community...CVE-2019-10067Fix available5.4 Medium
- otrs, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0...CVE-2019-9892Fix available6.5 Medium
- otrs, opensuse backports sle, leap +2 moreAn issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16...CVE-2019-9752Fix available5.4 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0...CVE-2019-9751Fix available4.8 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to...CVE-2018-20800Fix available6.5 Medium
- otrs open ticket request system, debian linux +1 moreOpen Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0...CVE-2018-19143Fix available6.5 Medium
- otrs open ticket request systemOpen Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack...CVE-2018-19142Fix available4.8 Medium
- otrs open ticket request system, debian linux +1 moreOpen Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to...CVE-2018-19141Fix available4.8 Medium
- otrs open ticket request system, debian linux +1 moreIn Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6...CVE-2018-16587Fix available6.5 Medium
- otrs open ticket request system, debian linux +1 moreIn Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6...CVE-2018-16586Fix available4.3 Medium
- otrs open ticket request system, debian linux +1 moreAn issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5...CVE-2018-14593Fix available8.8 High
- Show moreLoading…