OT
Product
OTRS
60
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 12Medium 40Low 4
Watch
Add OTRS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38060 | 8.8 | Jul 24 | Host header injection by attachments in web service Affected: 7.0.x before 7.0.45; 8.0.x before 8.0.35 |
| CVE-2022-39051 | 8.8 | Sep 5 | Perl Code execution in Template Toolkit Affected: 7.0.x 7.0.36; 8.0.x 8.0.24 |
| CVE-2021-36100 | 8.8 | Mar 21 | Authenticated remote code execution Affected: 8.0.x through 8.0.19; 7.0.x through 7.0.32 |
| CVE-2024-43444 | 8.2 | Aug 26 | Passwords are written to Admin Log Module Affected: 7.0.x through 7.0.50; 8.0.x; 2023.x; 2024.x through 2024.5.x |
| CVE-2023-2534 | 8.1 | May 8 | Information disclouse and DoS via websocket push events Affected: 8.0.x before 8.0.32 |
| CVE-2023-1250 | 7.8 | Mar 20 | Code execution through ACL creation Affected: 7.0.x before 7.0.42; 8.0.x before 8.0.31 |
| CVE-2024-23794 | 7.5 | Jul 15 | Agents are able to lock the ticket without the "Owner" permission Affected: 8.0.x; 2023.x; 2024.x through 2024.4.x |
| CVE-2024-23791 | 7.5 | Jan 29 | Unnecessary data is written to log if issues during indexing occurs Affected: 7.0.x through 7.0.48; 8.0.x through 8.0.37; 2023.x through 2023.1.1 |
| CVE-2023-6254 | 7.5 | Nov 27 | Password is send back to client Affected: 8.0.x through 8.0.37 |
| CVE-2021-21441 | 7.5 | Jun 16 | XSS in the ticket overview screens Affected: 7.0.x through 7.0.26 |
| CVE-2023-38056 | 7.2 | Jul 24 | Code execution via System Configuration Affected: 7.0.x before 7.0.45; 8.0.x before 8.0.35 |
| CVE-2026-48209 | 7.1 | Jun 1 | Reflected XSS in authenticated agent context Affected: 7.0.x |
Showing 12