Read the docs

OTRS AG

Records170All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

OTRS AG records in CISA KEV

No OTRS AG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Otrs 142 records MEDIUM Otrs Itsm 8 records MEDIUM Open Ticket Request System 6 records MEDIUM Faq 4 records MEDIUM Otrs Help Desk 2 records LOW Survey 2 records LOW Calendar Resource Planning 1 record LOW Cis In Customer Frontend 1 record LOW

Records

8 records in Otrs Itsm · all components

TI-2021-14548 CVE-2021-36100 · GHSA-9jrh-x229-v96c

Authenticated remote code execution in OTRS

Priority MEDIUM 41

Specially crafted string in OTRS system configuration can allow the execution of any system command.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01318 Published 2022-03-21 No fix listed CWE-78
TI-2013-04138 CVE-2013-4717 · GHSA-8pr4-q5mj-2m5q

Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk…

Priority MEDIUM 41

Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands vi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01322 Published 2021-08-09 No fix listed CWE-89
TI-2013-02322 CVE-2013-2637 · GHSA-6cx5-8j63-3v47

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and…

Priority LOW 34

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user exe…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04305 Published 2020-02-12 No fix listed CWE-79
TI-2013-03101 CVE-2013-3551 · GHSA-rw85-3j9f-967p

Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before…

Priority LOW 32

Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.2.x before 3.2.7, and OTRS ITSM 3.0.x before 3.0.8, 3.1.x before 3.1.9, and 3.2.x before 3.2.5 does…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01577 Published 2020-02-21 No fix listed CWE-200
TI-2012-02240 CVE-2012-2582 · GHSA-74m7-9rv3-r9vp

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS)…

Priority LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04195 Published 2012-08-23 No fix listed CWE-79
TI-2013-04139 CVE-2013-4718 · GHSA-chj6-mj6m-hxr7

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00668 Published 2021-08-09 No fix listed CWE-79
Open these records in search →