Where
-Infinity
0

Trending

Last week
Last month
Last year

Zammad ZammadSSRF

Risk 15
Severity
4.1
EPSS
0.04%
First published (updated )
CVE-2025-32358

Zammad ZammadIn Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changin…

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2025-32359

Zammad ZammadIn Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use…

Risk 16
Severity
4.3
EPSS
0.02%
First published (updated )
CVE-2025-32357

Zammad ZammadIn Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and w…

Risk 43
Severity
8.1
EPSS
0.03%
First published (updated )
CVE-2025-32360

Zammad ZammadZammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and applicat…

Risk 22
Severity
4.3
First published (updated )
CVE-2024-55578
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadCode Injection

Risk 60
Severity
6.7
First published (updated )
CVE-2024-36078

Zammad ZammadAn issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have ac…

Risk 45
Severity
8.6
EPSS
0.04%
First published (updated )
CVE-2024-33666

Zammad ZammadAn issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially gue…

Risk 47
Severity
9.1
EPSS
0.04%
First published (updated )
CVE-2024-33668

Zammad ZammadAn issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial…

Risk 27
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2024-33667

Zammad ZammadAn issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address v…

Risk 43
Severity
7.5
First published (updated )
CVE-2023-50455
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadAn issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answ…

Risk 22
Severity
4.3
First published (updated )
CVE-2023-50457

Zammad ZammadAn issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish…

Risk 35
Severity
5.9
First published (updated )
CVE-2023-50454

Zammad ZammadAn issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its…

Risk 27
Severity
5.3
First published (updated )
CVE-2023-50453

Zammad ZammadAn issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated …

Risk 27
Severity
5.3
First published (updated )
CVE-2023-50456

Zammad ZammadAn issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address …

Risk 40
Severity
6.5
First published (updated )
CVE-2023-31597
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadZammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker coul…

Risk 38
Severity
6.5
First published (updated )
CVE-2023-29867

Zammad ZammadZammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker w…

Risk 38
Severity
6.5
First published (updated )
CVE-2023-29868

Zammad ZammadInsufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform cha…

Risk 22
Severity
4.3
First published (updated )
CVE-2022-48023

Zammad ZammadAn issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agen…

Risk 22
Severity
4.3
First published (updated )
CVE-2022-48022

Zammad ZammadA vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges v…

Risk 86
Severity
9.8
First published (updated )
CVE-2022-48021
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadA lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long pas…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-29700

Zammad ZammadA lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send a…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-29701

Zammad ZammadAn access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log wit…

Risk 66
Severity
9.1
First published (updated )
CVE-2022-27332

Zammad ZammadAn access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all user…

Risk 22
Severity
4.3
First published (updated )
CVE-2022-27331

Zammad ZammadWith certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access wit…

Risk 60
Severity
8.1
First published (updated )
CVE-2021-43145
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Zammad ZammadIn Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substit…

Risk 27
Severity
5.3
First published (updated )
CVE-2021-44886

Zammad ZammadXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2021-35298

Zammad ZammadIncorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive informatio…

Risk 43
Severity
7.5
First published (updated )
CVE-2021-35299

Zammad ZammadText injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers…

Risk 22
Severity
4.3
First published (updated )
CVE-2021-35300

Zammad ZammadIncorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive inf…

Risk 27
Severity
5.3
First published (updated )
CVE-2021-35301
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203