Filter
Software
OTRSSMTP Password will be shown in cleartext on some SMTP errors
6.3
EPSS
0.04%
First published (updated )
OTRSImproper check of permissions in Generic Interface
3.5
First published (updated )
OTRSMissing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffing
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
OTRSAgents are able to lock the ticket without the "Owner" permission
7.5
First published (updated )
OTRSInformation exlosure in external interface
5.7
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
OTRSMissing file type check in avatar picture upload
9.8
EPSS
0.09%
First published (updated )
OTRSUnnecessary data is written to log if issues during indexing occurs
7.5
EPSS
0.09%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
OTRSSSL Certificates are not checked for E-Mail Handling
9.1
First published (updated )
OTRSHost header injection by attachments in web service
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
OTRSInformation disclouse and DoS via websocket push events
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
OTRSInformation exposure of template content due to missing check of permissions
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.