Skip to contentZammad vulnerabilities
Newest
- zammadAn issue was discovered in Zammad before 3.4.1. There is Stored XSS via a Tags element in a TIcket.CVE-2020-260355.4 Medium
- zammadAn issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can...CVE-2020-291584.3 Medium
- zammadAn issue was discovered in Zammad before 3.5.1. The default signup Role (for newly created Users)...CVE-2020-291594.9 Medium
- zammadAn issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change...CVE-2020-291607.5 High
- zammadZammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address...CVE-2020-142146.5 Medium
- zammadIn Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e...CVE-2020-142135.4 Medium
- zammadAn issue was discovered in Zammad 3.0 through 3.2. It does not prevent caching of confidential...CVE-2020-100967.5 High
- zammadAn issue was discovered in Zammad 3.0 through 3.2. It may respond with verbose error messages...CVE-2020-100975.3 Medium
- zammadAn XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low...CVE-2020-100985.4 Medium
- zammadAn XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low...CVE-2020-100995.4 Medium
- zammadAn issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer...CVE-2020-101006.5 Medium
- zammadAn issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in...CVE-2020-101017.5 High
- zammadAn issue was discovered in Zammad 3.0 through 3.2. The Forgot Password functionality is...CVE-2020-101025.3 Medium
- zammadAn XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low...CVE-2020-101035.4 Medium
- zammadAn issue was discovered in Zammad 3.0 through 3.2. After authentication, it transmits sensitive...CVE-2020-101044.3 Medium
- zammadAn issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources...CVE-2020-101055.3 Medium
- zammadZammad GmbH Zammad 2.3.0 and earlier is affected by: Cross Site Scripting (XSS) - CWE-80. The...CVE-2019-10100186.1 Medium
- zammadZammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related...CVE-2018-10001546.1 Medium
- zammadA CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1....CVE-2017-60818.8 High
- zammadAn issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1,...CVE-2017-60809.8 Critical
- zammadAn issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS...CVE-2017-56216.1 Medium
- zammadAn XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1....CVE-2017-56206.1 Medium
- zammadAn issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1....CVE-2017-56199.8 Critical