OC
Product
((OTRS)) Community Edition
12
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 7Low 2
Watch
Add ((OTRS)) Community Edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48188 | 9.1 | Jun 1 | SQL Injection via MySQL Quote Method Affected: 6.x |
| CVE-2024-43444 | 8.2 | Aug 26 | Passwords are written to Admin Log Module Affected: 6.0.x |
| CVE-2026-48209 | 7.1 | Jun 1 | Reflected XSS in authenticated agent context Affected: 6.x |
| CVE-2026-48208 | 6.5 | Jun 1 | Denial-of-Service via SVG Rendering in Ticket Affected: 6.x |
| CVE-2022-39052 | 6.5 | Oct 17 | DoS attack using email Affected: 6.0.1 before 6.0.x* |
| CVE-2025-24389 | 6.3 | Jan 27 | SMTP Password will be shown in cleartext on some SMTP errors Affected: 6.0.x through 6.0.34 |
| CVE-2024-23793 | 6.3 | Jun 6 | Upload of files outside application directory Affected: 6.0.1 through 6.0.34 |
| CVE-2024-43445 | 5.4 | Jan 27 | Missing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffing Affected: 6.0.x through 6.0.34 |
| CVE-2024-43443 | 4.9 | Aug 26 | Stored XSS in process management Affected: 6.0.x |
| CVE-2024-43442 | 4.9 | Aug 26 | Stored XSS in System Configuration Affected: 6.0.x |
| CVE-2025-24388 | 3.8 | Jun 16 | Unsafe handling of AJAX calls Affected: 6.0.x |
| CVE-2024-43446 | 3.5 | Jan 27 | Improper check of permissions in Generic Interface Affected: 6.0.x through 6.0.34 |
Showing 12