Filter
AND
Versions
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address v…
7.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answ…
4.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish…
5.9
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its…
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated …
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address …
6.5
First published (updated )
Zammad ZammadZammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker coul…
6.5
First published (updated )
Zammad ZammadZammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker w…
6.5
First published (updated )
Zammad ZammadInsufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform cha…
4.3
First published (updated )
Zammad ZammadAn issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agen…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadA vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges v…
9.8
First published (updated )
Zammad ZammadZammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic …
6.5
First published (updated )
Zammad ZammadZammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to ticket…
4.3
First published (updated )
Zammad ZammadZammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization o…
7.5
First published (updated )
Zammad ZammadZammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force atta…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadIn Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizati…
6.5
First published (updated )
Zammad ZammadIn Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of …
7.5
First published (updated )
Zammad ZammadA lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long pas…
7.5
First published (updated )
Zammad ZammadA lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send a…
7.5
First published (updated )
Zammad ZammadAn access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log wit…
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all user…
4.3
First published (updated )
Zammad ZammadWith certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access wit…
8.1
First published (updated )
Zammad ZammadIn Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substit…
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the …
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a …
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain a…
8.8
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.