Read the docs

OTRS AG

Records170All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

OTRS AG records in CISA KEV

No OTRS AG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Otrs 142 records MEDIUM Otrs Itsm 8 records MEDIUM Open Ticket Request System 6 records MEDIUM Faq 4 records MEDIUM Otrs Help Desk 2 records LOW Survey 2 records LOW Calendar Resource Planning 1 record LOW Cis In Customer Frontend 1 record LOW

Records

4 records in Faq · all components

TI-2016-05069 CVE-2016-5843 · GHSA-9gq7-7qp9-2c82

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before…

Priority MEDIUM 46

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to execute arbitrary SQL commands via crafted…

CVSS 3.0CRITICAL 9.4 Network No auth No interaction EPSS 0.03209 Published 2016-09-17 No fix listed CWE-89
TI-2013-02322 CVE-2013-2637 · GHSA-6cx5-8j63-3v47

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and…

Priority LOW 34

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user exe…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04305 Published 2020-02-12 No fix listed CWE-79
TI-2021-04536 CVE-2021-21438 · GHSA-vxww-8wxj-j946

FAQ articles are shown to users without permission

Priority LOW 21

Agents are able to see linked FAQ articles without permissions (defined in FAQ Category).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00634 Published 2021-03-22 No fix listed CWE-264
Open these records in search →