Where
-Infinity
0

OTRS OTRSEmail with special content can lead to DoS

Risk 33
Severity
5.7
First published (updated )

OTRS OTRSSQL Injection via MySQL Quote Method

Risk 66
Severity
9.1
First published (updated )

OTRS OTRSBypass DedicatedAgentToCustomerGroups Setting

Risk 33
Severity
5.7
First published (updated )

OTRS OTRSIncorrect handling of permissions in External Interface Config Item List module

Risk 19
Severity
3.5
First published (updated )

OTRS OTRSWrong Permission Handling in Document Search Article Meta Filters

Risk 19
Severity
3.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OTRS OTRSDenial-of-Service via SVG Rendering in Ticket

Risk 37
Severity
6.5
First published (updated )

OTRS OTRSReflected XSS in authenticated agent context

Risk 47
Severity
7.1
First published (updated )

OTRS OTRSPossible information disclosure via External Interface

Risk 33
Severity
5.7
First published (updated )

OTRS OTRSPossible DoS via SQL Box

Risk 20
Severity
4.5
EPSS
0.03%
First published (updated )

OTRS OTRSInformation exlosure in external interface

Risk 24
Severity
5.7
EPSS
0.05%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OTRS OTRSUpload of files outside application directory

Risk 43
Severity
6.3
First published (updated )

OTRS OTRSMissing file type check in avatar picture upload

Risk 61
Severity
9.8
EPSS
0.09%
First published (updated )

OTRS OTRSUnnecessary data is written to log if issues during indexing occurs

Risk 31
Severity
7.5
EPSS
0.09%
First published (updated )

OTRS OTRSInsufficient access control

Risk 27
Severity
6.5
EPSS
0.05%
First published (updated )

OTRS OTRSPossible XSS stored in customer information

Risk 29
Severity
4.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OTRS OTRSPossible XSS in Admin Interface

Risk 29
Severity
4.8
First published (updated )

OTRS OTRSInformation disclosure in the External Interface

Risk 27
Severity
5.3
First published (updated )

Otrs Calendar Resource PlanningOTRS version number is always in the exported ICS files

Risk 27
Severity
5.3
First published (updated )

OTRS OTRSDynamic field error message is vulnerable to XSS

Risk 29
Severity
4.8
First published (updated )

OTRS OTRSSupport Bundle includes S/Mime and PGP secret or PIN

Risk 36
Severity
5.2
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OTRS OTRSXSS attack in appointment edit popup screen

Risk 33
Severity
5.7
First published (updated )

OTRS OTRSBypassing user account validation

Risk 22
Severity
4.3
First published (updated )

OTRS OTRSInformation disclosure

Risk 30
Severity
4.9
First published (updated )

OTRS OTRSInformation disclosure in support bundle files

Risk 22
Severity
4.3
First published (updated )

OTRS OTRSSession / Password / Password token leak

Risk 60
Severity
8.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

OTRS OTRSInformation Disclosure

Risk 43
Severity
7.5
First published (updated )

OTRS OTRSAutocomplete in the form login screens

Risk 22
Severity
4.3
First published (updated )

OTRS OTRSPossible XSS in Customer user address book

Risk 34
Severity
5.4
First published (updated )

OTRS OTRSInfoleak

Risk 38
Severity
6.5
First published (updated )

OTRS OTRSExternal Interface does not invalidate session

Risk 34
Severity
5.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203