Read the docs
TI-2017-10731 Aliases CVE-2017-14635GHSA-7r29-5mg8-c6rc

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x…

Priority MEDIUM 42CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection.

Why it matters now

EPSS 0.01922 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 82

CPEVersionsRoleVendor
cpe:2.3:a:otrs:otrs:3.3.0:*:*:*:*:*:*:*3.3.0VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.0:beta1:*:*:*:*:*:*3.3.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.0:beta2:*:*:*:*:*:*3.3.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.0:beta3:*:*:*:*:*:*3.3.0 beta3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.0:beta4:*:*:*:*:*:*3.3.0 beta4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.0:beta5:*:*:*:*:*:*3.3.0 beta5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.0:rc1:*:*:*:*:*:*3.3.0 rc1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.3:*:*:*:*:*:*:*3.3.3VulnerableOTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.0:*:*:*:*:*:*:* Versions 3.3.0 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.0:beta1:*:*:*:*:*:* Versions 3.3.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.0:beta2:*:*:*:*:*:* Versions 3.3.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.0:beta3:*:*:*:*:*:* Versions 3.3.0 beta3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.0:beta4:*:*:*:*:*:* Versions 3.3.0 beta4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.0:beta5:*:*:*:*:*:* Versions 3.3.0 beta5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.0:rc1:*:*:*:*:*:* Versions 3.3.0 rc1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·OTRS AG
Show 72 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:otrs:otrs:3.3.4:*:*:*:*:*:*:*3.3.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.5:*:*:*:*:*:*:*3.3.5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.6:*:*:*:*:*:*:*3.3.6VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.7:*:*:*:*:*:*:*3.3.7VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.8:*:*:*:*:*:*:*3.3.8VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.9:*:*:*:*:*:*:*3.3.9VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.10:*:*:*:*:*:*:*3.3.10VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.11:*:*:*:*:*:*:*3.3.11VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.12:*:*:*:*:*:*:*3.3.12VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.13:*:*:*:*:*:*:*3.3.13VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.14:*:*:*:*:*:*:*3.3.14VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.15:*:*:*:*:*:*:*3.3.15VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.16:*:*:*:*:*:*:*3.3.16VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:3.3.17:*:*:*:*:*:*:*3.3.17VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.0:beta1:*:*:*:*:*:*4.0.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.0:beta2:*:*:*:*:*:*4.0.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.0:beta3:*:*:*:*:*:*4.0.0 beta3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.0:beta4:*:*:*:*:*:*4.0.0 beta4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.0:beta5:*:*:*:*:*:*4.0.0 beta5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.0:rc1:*:*:*:*:*:*4.0.0 rc1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.2:*:*:*:*:*:*:*4.0.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.3:*:*:*:*:*:*:*4.0.3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.4:*:*:*:*:*:*:*4.0.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.5:*:*:*:*:*:*:*4.0.5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.6:*:*:*:*:*:*:*4.0.6VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.7:*:*:*:*:*:*:*4.0.7VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.8:*:*:*:*:*:*:*4.0.8VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.9:*:*:*:*:*:*:*4.0.9VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.10:*:*:*:*:*:*:*4.0.10VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.11:*:*:*:*:*:*:*4.0.11VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.12:*:*:*:*:*:*:*4.0.12VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.13:*:*:*:*:*:*:*4.0.13VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.14:*:*:*:*:*:*:*4.0.14VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.15:*:*:*:*:*:*:*4.0.15VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.16:*:*:*:*:*:*:*4.0.16VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.17:*:*:*:*:*:*:*4.0.17VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.18:*:*:*:*:*:*:*4.0.18VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.19:*:*:*:*:*:*:*4.0.19VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.20:*:*:*:*:*:*:*4.0.20VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.21:*:*:*:*:*:*:*4.0.21VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.22:*:*:*:*:*:*:*4.0.22VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.23:*:*:*:*:*:*:*4.0.23VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:4.0.24:*:*:*:*:*:*:*4.0.24VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.0:beta1:*:*:*:*:*:*5.0.0 beta1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.0:beta2:*:*:*:*:*:*5.0.0 beta2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.0:beta3:*:*:*:*:*:*5.0.0 beta3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.0:beta4:*:*:*:*:*:*5.0.0 beta4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.0:beta5:*:*:*:*:*:*5.0.0 beta5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.0:rc1:*:*:*:*:*:*5.0.0 rc1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.1:*:*:*:*:*:*:*5.0.1VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.2:*:*:*:*:*:*:*5.0.2VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.3:*:*:*:*:*:*:*5.0.3VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.4:*:*:*:*:*:*:*5.0.4VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.5:*:*:*:*:*:*:*5.0.5VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.6:*:*:*:*:*:*:*5.0.6VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.7:*:*:*:*:*:*:*5.0.7VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.8:*:*:*:*:*:*:*5.0.8VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.9:*:*:*:*:*:*:*5.0.9VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.10:*:*:*:*:*:*:*5.0.10VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.11:*:*:*:*:*:*:*5.0.11VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.12:*:*:*:*:*:*:*5.0.12VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.13:*:*:*:*:*:*:*5.0.13VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.14:*:*:*:*:*:*:*5.0.14VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.15:*:*:*:*:*:*:*5.0.15VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.16:*:*:*:*:*:*:*5.0.16VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.17:*:*:*:*:*:*:*5.0.17VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.18:*:*:*:*:*:*:*5.0.18VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.19:*:*:*:*:*:*:*5.0.19VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.20:*:*:*:*:*:*:*5.0.20VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.21:*:*:*:*:*:*:*5.0.21VulnerableOTRS AG
cpe:2.3:a:otrs:otrs:5.0.22:*:*:*:*:*:*:*5.0.22VulnerableOTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.7:*:*:*:*:*:*:* Versions 3.3.7 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.8:*:*:*:*:*:*:* Versions 3.3.8 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.9:*:*:*:*:*:*:* Versions 3.3.9 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.10:*:*:*:*:*:*:* Versions 3.3.10 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.11:*:*:*:*:*:*:* Versions 3.3.11 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.12:*:*:*:*:*:*:* Versions 3.3.12 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.13:*:*:*:*:*:*:* Versions 3.3.13 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.14:*:*:*:*:*:*:* Versions 3.3.14 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.15:*:*:*:*:*:*:* Versions 3.3.15 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.16:*:*:*:*:*:*:* Versions 3.3.16 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:3.3.17:*:*:*:*:*:*:* Versions 3.3.17 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.0:beta1:*:*:*:*:*:* Versions 4.0.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.0:beta2:*:*:*:*:*:* Versions 4.0.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.0:beta3:*:*:*:*:*:* Versions 4.0.0 beta3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.0:beta4:*:*:*:*:*:* Versions 4.0.0 beta4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.0:beta5:*:*:*:*:*:* Versions 4.0.0 beta5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.0:rc1:*:*:*:*:*:* Versions 4.0.0 rc1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.9:*:*:*:*:*:*:* Versions 4.0.9 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.10:*:*:*:*:*:*:* Versions 4.0.10 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.11:*:*:*:*:*:*:* Versions 4.0.11 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.12:*:*:*:*:*:*:* Versions 4.0.12 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.13:*:*:*:*:*:*:* Versions 4.0.13 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.14:*:*:*:*:*:*:* Versions 4.0.14 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.15:*:*:*:*:*:*:* Versions 4.0.15 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.16:*:*:*:*:*:*:* Versions 4.0.16 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.17:*:*:*:*:*:*:* Versions 4.0.17 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.18:*:*:*:*:*:*:* Versions 4.0.18 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.19:*:*:*:*:*:*:* Versions 4.0.19 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.20:*:*:*:*:*:*:* Versions 4.0.20 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.21:*:*:*:*:*:*:* Versions 4.0.21 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.22:*:*:*:*:*:*:* Versions 4.0.22 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.23:*:*:*:*:*:*:* Versions 4.0.23 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:4.0.24:*:*:*:*:*:*:* Versions 4.0.24 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.0:beta1:*:*:*:*:*:* Versions 5.0.0 beta1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.0:beta2:*:*:*:*:*:* Versions 5.0.0 beta2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.0:beta3:*:*:*:*:*:* Versions 5.0.0 beta3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.0:beta4:*:*:*:*:*:* Versions 5.0.0 beta4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.0:beta5:*:*:*:*:*:* Versions 5.0.0 beta5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.0:rc1:*:*:*:*:*:* Versions 5.0.0 rc1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.2:*:*:*:*:*:*:* Versions 5.0.2 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.3:*:*:*:*:*:*:* Versions 5.0.3 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.4:*:*:*:*:*:*:* Versions 5.0.4 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.5:*:*:*:*:*:*:* Versions 5.0.5 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.6:*:*:*:*:*:*:* Versions 5.0.6 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.7:*:*:*:*:*:*:* Versions 5.0.7 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.8:*:*:*:*:*:*:* Versions 5.0.8 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.9:*:*:*:*:*:*:* Versions 5.0.9 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.10:*:*:*:*:*:*:* Versions 5.0.10 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.11:*:*:*:*:*:*:* Versions 5.0.11 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.12:*:*:*:*:*:*:* Versions 5.0.12 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.13:*:*:*:*:*:*:* Versions 5.0.13 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.14:*:*:*:*:*:*:* Versions 5.0.14 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.15:*:*:*:*:*:*:* Versions 5.0.15 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.16:*:*:*:*:*:*:* Versions 5.0.16 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.17:*:*:*:*:*:*:* Versions 5.0.17 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.18:*:*:*:*:*:*:* Versions 5.0.18 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.19:*:*:*:*:*:*:* Versions 5.0.19 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.20:*:*:*:*:*:*:* Versions 5.0.20 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.21:*:*:*:*:*:*:* Versions 5.0.21 Vulnerable ·OTRS AG
  • cpe:2.3:a:otrs:otrs:5.0.22:*:*:*:*:*:*:* Versions 5.0.22 Vulnerable ·OTRS AG

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-14635
  2. 2026-10-03 Alias added: GHSA-7r29-5mg8-c6rc

References

Advisory 2

  • TI-2017-12458 In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS… CVSS 3.0HIGH 8.8
  • TI-2026-35608 SQL Injection via MySQL Quote Method CVSS 3.1CRITICAL 9.1
  • TI-2023-04991 SSL Certificates are not checked for E-Mail Handling CVSS 3.1CRITICAL 9.1
  • TI-2022-04045 SQL Injection via OTRS Search API CVSS 3.1CRITICAL 9.8
  • TI-2017-12258 Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5… CVSS 3.0HIGH 8.8
  • TI-2017-06753 In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x… CVSS 3.0HIGH 8.8
See all 141 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences