Vulnerabilities

TI-2021-14548 CVE-2021-36100 · GHSA-9jrh-x229-v96c

Authenticated remote code execution in OTRS

MEDIUM 41

Specially crafted string in OTRS system configuration can allow the execution of any system command.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01318 Published 2022-03-21 No fix listed CWE-78

TI-2013-04139 CVE-2013-4718 · GHSA-chj6-mj6m-hxr7

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x…

LOW 26

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00668 Published 2021-08-09 No fix listed CWE-79

TI-2013-04138 CVE-2013-4717 · GHSA-8pr4-q5mj-2m5q

Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk…

MEDIUM 41

Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands vi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01322 Published 2021-08-09 No fix listed CWE-89

TI-2013-03101 CVE-2013-3551 · GHSA-rw85-3j9f-967p

Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before…

LOW 32

Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.2.x before 3.2.7, and OTRS ITSM 3.0.x before 3.0.8, 3.1.x before 3.1.9, and 3.2.x before 3.2.5 does…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01577 Published 2020-02-21 No fix listed CWE-200

TI-2013-02322 CVE-2013-2637 · GHSA-6cx5-8j63-3v47

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and…

LOW 34

A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user exe…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04305 Published 2020-02-12 No fix listed CWE-79

TI-2013-02311 CVE-2013-2625 · GHSA-87rp-gwq4-fx5h

An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS…

LOW 31

An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01291 Published 2019-11-27 No fix listed CWE-269

TI-2012-03940 CVE-2012-4600 · GHSA-wx2x-284c-86m6

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk…

LOW 22

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.06346 Published 2012-08-31 No fix listed CWE-79

TI-2012-02240 CVE-2012-2582 · GHSA-74m7-9rv3-r9vp

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS)…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04195 Published 2012-08-23 No fix listed CWE-79

Vulnerabilities

Filters