Software
Otrs OtrsAgents are able to lock the ticket without the "Owner" permission
Otrs OtrsInformation exlosure in external interface
Otrs OtrsMissing file type check in avatar picture upload
Otrs OtrsUnnecessary data is written to log if issues during indexing occurs
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs OtrsPossible XSS execution in customer information
Otrs OtrsSSL Certificates are not checked for E-Mail Handling
Otrs OtrsHost header injection by attachments in web service
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs OtrsInformation disclouse and DoS via websocket push events
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs OtrsInformation exposure of template content due to missing check of permissions
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs OtrsPossible XSS stored in customer information
Otrs OtrsInformation disclosure in Request New Password feature
Otrs OtrsInformation disclosure in the External Interface
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs Calendar Resource PlanningOTRS version number is always in the exported ICS files
Otrs OtrsInformation disclosure in the External Interface
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs OtrsDynamic field error message is vulnerable to XSS
Otrs OtrsAgents are able to lock the ticket without the "Owner" permission
Otrs OtrsUser enumeration issue using "lost password" feature
Otrs OtrsXSS attack in appointment edit popup screen
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs OtrsSupport Bundle includes S/Mime and PGP secret or PIN
Otrs OtrsUnautorized access to the calendar appointments
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs OtrsUnautorized listing of the customer user emails
Otrs OtrsSupport Bundle includes S/Mime and PGP keys
Otrs Time AccountingXSS vulnerability in Time Accounting
Otrs OtrsPossible DoS attack using a special crafted URL in email body
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Otrs FaqFAQ articles are shown to users without permission
Otrs ItsmconfigurationmanagementConfig Items are shown to users without permission
Otrs Cis In Customer FrontendAgent is able to link customer's Config Items without permission
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.