Latest vulnerabilities for "otrs otrs" 7.0.0

7.5

EPSS

0.09%

First published (updated )

CVE-2024-23791

Otrs OtrsInsufficient access control

6.5

EPSS

0.05%

First published (updated )

CVE-2024-23792

Otrs OtrsInfoleak

5.3

First published (updated )

CVE-2023-38059

Otrs OtrsPossible XSS execution in customer information

5.5

First published (updated )

CVE-2023-5421

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsSSL Certificates are not checked for E-Mail Handling

critical

9.1

First published (updated )

CVE-2023-5422

Otrs OtrsHost header injection by attachments in web service

8.8

First published (updated )

CVE-2023-38060

OTRS SurveyXSS stored in survey answers

5.4

First published (updated )

CVE-2023-38057

Otrs OtrsCode execution via System Configuration

7.2

First published (updated )

CVE-2023-38056

Otrs OtrsCode execution through ACL creation

7.8

First published (updated )

CVE-2023-1250

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsPossible XSS in Ticket Actions

6.1

First published (updated )

CVE-2023-1248

Otrs OtrsDoS attack using email

7.5

First published (updated )

CVE-2022-39052

Otrs OtrsPerl Code execution in Template Toolkit

8.8

First published (updated )

CVE-2022-39051

Otrs OtrsPossible XSS stored in customer information

4.8

First published (updated )

CVE-2022-39050

Otrs OtrsPossible XSS in Admin Interface

4.8

First published (updated )

CVE-2022-39049

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsInformation disclosure in Request New Password feature

5.3

First published (updated )

CVE-2022-32741

Otrs OtrsInformation disclosure in the External Interface

5.3

First published (updated )

CVE-2022-32740

Otrs Calendar Resource PlanningOTRS version number is always in the exported ICS files

5.3

First published (updated )

CVE-2022-32739

Otrs OtrsInformation disclosure in the External Interface

4.3

First published (updated )

CVE-2022-1004

Otrs OtrsPossible XSS attack via translation

5.4

First published (updated )

CVE-2022-0475

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsDynamic field error message is vulnerable to XSS

4.8

First published (updated )

CVE-2022-0473

Otrs OtrsUser enumeration issue using "lost password" feature

5.3

First published (updated )

CVE-2021-36095

Otrs OtrsDoS attack using PostMaster filters

5.3

First published (updated )

CVE-2021-36093

Otrs OtrsXSS attack in appointment edit popup screen

5.7

First published (updated )

CVE-2021-36094

Otrs OtrsSupport Bundle includes S/Mime and PGP secret or PIN

5.2

First published (updated )

CVE-2021-36096

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsXSS attack using special link in email

6.5

First published (updated )

CVE-2021-36092

Otrs OtrsUnautorized access to the calendar appointments

4.3

First published (updated )

CVE-2021-36091

Otrs OtrsUnautorized listing of the customer user emails

4.3

First published (updated )

CVE-2021-21443

Otrs OtrsSupport Bundle includes S/Mime and PGP keys

6.5

First published (updated )

CVE-2021-21440

Otrs OtrsXSS in the ticket overview screens

7.5

First published (updated )

CVE-2021-21441

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsPossible DoS attack using a special crafted URL in email body

6.5

First published (updated )

CVE-2021-21439

Otrs FaqFAQ articles are shown to users without permission

4.3

First published (updated )

CVE-2021-21438

Otrs OtrsInformation exposure in PDF export

6.5

First published (updated )

CVE-2021-21435

Otrs OtrsAgent names disclosed in chat feature

5.3

First published (updated )

CVE-2020-1777

Otrs OtrsInvalidating or changing user does not invalidate session

4.3

First published (updated )

CVE-2020-1776

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsInformation disclosure in external interface

4.3

First published (updated )

CVE-2020-1775

Otrs OtrsInformation disclosure

4.9

First published (updated )

CVE-2020-1774

Otrs OtrsSession / Password / Password token leak

8.1

First published (updated )

CVE-2020-1773

Otrs OtrsInformation Disclosure

7.5

First published (updated )

CVE-2020-1772

Otrs OtrsAutocomplete in the form login screens

4.3

First published (updated )

CVE-2020-1769

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsPossible XSS in Customer user address book

5.4

First published (updated )

CVE-2020-1771

Otrs OtrsInformation disclosure in support bundle files

4.3

First published (updated )

CVE-2020-1770

Otrs OtrsXSS

5.4

First published (updated )

CVE-2019-16375

Otrs OtrsInfoleak

4.3

First published (updated )

CVE-2019-13457

Otrs OtrsAn issue was discovered in Open Ticket Request System (OTRS) 7.0 through 7.0.6. An attacker who is l…

4.3

First published (updated )

CVE-2019-10065

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Otrs OtrsExternal Interface does not invalidate session

5.5

First published (updated )

CVE-2020-1768

Otrs OtrsImproper handling of uploaded inline images

6.1

First published (updated )

CVE-2020-1766

Otrs OtrsSpoofing of From field in several screens

5.3

First published (updated )

CVE-2020-1765

Otrs OtrsPossible to send drafted messages as wrong agent

4.3

First published (updated )

CVE-2020-1767

Otrs OtrsAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edi…

4.3

First published (updated )

CVE-2019-18179

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.