OTRS AG

Records170All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

OTRS AG records in CISA KEV

No OTRS AG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Otrs 142 records MEDIUM Otrs Itsm 8 records MEDIUM Open Ticket Request System 6 records MEDIUM Faq 4 records MEDIUM Otrs Help Desk 2 records LOW Survey 2 records LOW Calendar Resource Planning 1 record LOW Cis In Customer Frontend 1 record LOW

Records

1 record in Cis In Customer Frontend · all components

TI-2021-04534 CVE-2021-21436 · GHSA-5gvf-qj79-739q

Agent is able to link customer's Config Items without permission

LOW 21

Agents are able to see and link Config Items without permissions, which are defined in General Catalog.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0077 Published 2021-02-08 No fix listed CWE-264

Open these records in search →