Filter
AND
Versions
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoin…
9.8
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attacker…
9.8
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. The Form functionality allows remote code execution …
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadZammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force atta…
9.8
First published (updated )
Zammad ZammadA vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges v…
9.8
First published (updated )
Zammad ZammadAn access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log wit…
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An Agent account can modify account data, and gain a…
8.8
First published (updated )
Zammad ZammadWith certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access wit…
8.1
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.5.1. A REST API call allows an attacker to change Ticket …
7.5
First published (updated )
Zammad ZammadIncorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive informatio…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadA lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long pas…
7.5
First published (updated )
Zammad ZammadA lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send a…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadZammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization o…
7.5
First published (updated )
Zammad ZammadIn Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of …
7.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address v…
7.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An admin can execute code on the server via a crafte…
7.2
First published (updated )
Zammad ZammadZammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker coul…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Zammad ZammadAn issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a …
6.5
First published (updated )
Zammad ZammadZammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for…
6.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer detai…
6.5
First published (updated )
Zammad ZammadAn issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonati…
6.5
First published (updated )
Zammad ZammadZammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker w…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.