zammad
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 121 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 13, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Zammad: Microsoft Graph error logs expose partially masked OAuth access tokens
Zammad: HTML sanitizer API path allowlist bypass via interior path traversal in img src/srcset
Zammad: Authenticated agents can read AI summary error messages from inaccessible tickets
Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail
Zammad: Missing rate limiting allows password brute-forcing during two-factor login
Zammad: Sensitive Information Exposure in Integration Administration API
Zammad: S/MIME signature verification allows forged sender impersonation
Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute
Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data
Zammad: Stored XSS via unescaped option labels in the object attribute options context UI
Monitor zammad in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.