Known vulnerabilities in otrs (Alpine package)

Vendor: Alpine Linux Development Team
Software: otrs (Alpine package)
Software CPE: cpe:2.3:o:alpine:otrs_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 39
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting otrs (Alpine package) otrs (Alpine package) is affected by 39 known vulnerabilities: 5 high, 11 medium, 23 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21434		 CWE-79 Low
No
No
 6.0.33-r0 08.02.2021 SB2021020814
SB2021040166
#VU51871 - Insufficient Session Expiration
CVE-2020-1776		 CWE-613 Low
No
No
 6.0.33-r0 20.07.2020 SB2020072024
SB2021040165
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 6.0.33-r0 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU34418 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1774		 CWE-200 Medium
No
No
 6.0.33-r0 28.04.2020 SB2020042874
SB2021040164
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 6.0.33-r0 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU51866 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1769		 CWE-200 Low
No
No
 6.0.33-r0 27.03.2020 SB2020032729
SB2021040159
#VU51867 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1770		 CWE-200 Low
No
No
 6.0.33-r0 27.03.2020 SB2020032730
SB2021040160
#VU51868 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1771		 CWE-79 Low
No
No
 6.0.33-r0 27.03.2020 SB2020032731
SB2021040161
#VU51869 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1772		 CWE-200 Medium
No
No
 6.0.33-r0 27.03.2020 SB2020032732
SB2021040162
#VU51870 - Insufficient Entropy
CVE-2020-1773		 CWE-331 High
No
No
 6.0.33-r0 27.03.2020 SB2020032733
SB2021040163
#VU51860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16375		 CWE-79 Low
No
No
 6.0.33-r0 19.03.2020 SB2020031945
SB2021040149
#VU51863 - Improper input validation
CVE-2020-1765		 CWE-20 Medium
No
No
 6.0.33-r0 10.01.2020 SB2020011016
SB2021040156
#VU51864 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1766		 CWE-79 Low
No
No
 6.0.33-r0 10.01.2020 SB2020011017
SB2021040157
#VU51865 - Improper input validation
CVE-2020-1767		 CWE-20 Low
No
No
 6.0.33-r0 10.01.2020 SB2020011018
SB2021040158
#VU34902 - Exposure of sensitive information to an unauthorized actor
CVE-2019-18179		 CWE-200 Low
No
No
 6.0.33-r0 06.01.2020 SB2020010621
SB2021040150
#VU51861 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-18180		 CWE-835 Medium
No
No
 6.0.33-r0 05.12.2019 SB2019120536
SB2021040151
#VU35603 - Credentials Management
CVE-2019-13458		 CWE-255 Medium
No
No
 6.0.33-r0 21.08.2019 SB2019082122
SB2021040148
#VU35890 - XML Injection
CVE-2019-9892		 CWE-91 Medium
No
No
 6.0.33-r0 22.05.2019 SB2019052229
SB2021040153
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 6.0.33-r0 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU51862 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-9752		 CWE-94 High
No
No
 6.0.33-r0 13.03.2019 SB2019031322
SB2021040152


Showing elements 1 - 20 out of 39