Filter
AND
AND
Versions
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answ…
4.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. In several subsystems, SSL/TLS was used to establish…
5.9
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its…
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated …
5.3
First published (updated )
Zammad ZammadAn issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address …
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadZammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker coul…
6.5
First published (updated )
Zammad ZammadZammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker w…
6.5
First published (updated )
Zammad ZammadInsufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform cha…
4.3
First published (updated )
Zammad ZammadAn issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agen…
4.3
First published (updated )
Zammad ZammadZammad 5.2.1 is vulnerable to Incorrect Access Control. Zammad's asset handling mechanism has logic …
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadZammad 5.2.1 has a fine-grained permission model that allows to configure read-only access to ticket…
4.3
First published (updated )
Zammad ZammadIn Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizati…
6.5
First published (updated )
Zammad ZammadAn access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all user…
4.3
First published (updated )
Zammad ZammadIn Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substit…
5.3
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 5.0.1. In some cases, there is improper enforcement of the …
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a …
6.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An admin can discover the application secret via the…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadText injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers…
4.3
First published (updated )
Zammad ZammadIncorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive inf…
5.3
First published (updated )
Zammad ZammadIncorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to o…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access…
4.9
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonati…
6.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. The global-search feature leaks Knowledge Base draft…
4.3
First published (updated )
Zammad ZammadAn account-enumeration issue was discovered in Zammad before 3.4.1. The Create User functionality is…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.