OTRS AG

Records170All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

OTRS AG records in CISA KEV

No OTRS AG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Otrs 142 records MEDIUM Otrs Itsm 8 records MEDIUM Open Ticket Request System 6 records MEDIUM Faq 4 records MEDIUM Otrs Help Desk 2 records LOW Survey 2 records LOW Calendar Resource Planning 1 record LOW Cis In Customer Frontend 1 record LOW

Records

2 records in Survey · all components

TI-2023-19481 CVE-2023-38057 · GHSA-48q8-4r5f-p5pf

XSS stored in survey answers

LOW 25

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00382 Published 2023-07-24 Fixed in 7.0.32, 8.0.13 CWE-20

TI-2021-04532 CVE-2021-21434 · GHSA-2rff-cr3q-94jm

XSS in Survey Module

LOW 23

Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00668 Published 2021-02-08 No fix listed CWE-79

Open these records in search →