Known vulnerabilities in otrs (Alpine package) - page 2

Vendor: Alpine Linux Development Team
Software: otrs (Alpine package)
Software CPE: cpe:2.3:o:alpine:otrs_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 39
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting otrs (Alpine package) otrs (Alpine package) is affected by 39 known vulnerabilities: 5 high, 11 medium, 23 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51859 - Exposure of sensitive information to an unauthorized actor
CVE-2019-13457		 CWE-200 Low
No
No
 6.0.33-r0 10.03.2020 SB20200310149
SB2021040147
#VU51856 - Improper input validation
CVE-2019-10065		 CWE-20 Low
No
No
 6.0.33-r0 10.03.2020 SB20200310148
SB2021040140
#VU35602 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12746		 CWE-200 Medium
No
No
 6.0.33-r0 21.08.2019 SB2019082121
SB2021040146
#VU35827 - Improper input validation
CVE-2019-12248		 CWE-20 Low
No
No
 6.0.33-r0 17.06.2019 SB2019061713
SB2021040144
#VU35828 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12497		 CWE-200 Medium
No
No
 6.0.33-r0 17.06.2019 SB2019061714
SB2021040145
#VU51857 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10066		 CWE-79 Low
No
No
 6.0.33-r0 22.05.2019 SB2019052232
SB2021040141
#VU51858 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10067		 CWE-79 Low
No
No
 6.0.33-r0 22.05.2019 SB2019052233
SB2021040142
#VU36075 - Improper input validation
CVE-2018-20800		 CWE-20 Medium
No
No
 6.0.33-r0 13.03.2019 SB2019031319
SB2021040139
#VU16521 - Permissions, Privileges, and Access Controls
CVE-2018-19143		 CWE-264 Low
No
No
 6.0.33-r0 13.12.2018 SB2018121306
SB2021040138
#VU16520 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19141		 CWE-79 Low
No
No
 6.0.33-r0 08.12.2018 SB2018121306
SB2021040137
#VU31182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-17960		 CWE-79 Low
No
No
 6.0.33-r0 14.11.2018 SB2018111420
SB2021040136
SB2018042442
and 6 more
#VU15368 - Improper Access Control
CVE-2018-14593		 CWE-284 Low
No
No
 6.0.33-r0 15.10.2018 SB2018080406
SB2018100405
SB2021040133
#VU31198 - Improper input validation
CVE-2018-16586		 CWE-20 Low
No
No
 6.0.33-r0 28.09.2018 SB2018092810
SB2018100405
SB2021040134
#VU31199 - Improper input validation
CVE-2018-16587		 CWE-20 Medium
No
No
 6.0.33-r0 28.09.2018 SB2018092810
SB2018100405
SB2021040135
#VU9751 - Missing release of memory after effective lifetime
CVE-2017-17476		 CWE-401 Low
No
No
 6.0.33-r0 25.12.2017 SB2017122103
SB2021040132
#VU37773 - Exposure of sensitive information to an unauthorized actor
CVE-2017-16854		 CWE-200 Medium
No
No
 6.0.33-r0 08.12.2017 SB2017120820
SB2021040130
#VU37774 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-16921		 CWE-78 High
Available
No
 6.0.33-r0 08.12.2017 SB2017120819
SB2021040131
#VU9423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-16664		 CWE-78 High
No
No
 6.0.33-r0 27.11.2017 SB2017112126
SB2017112304
SB2021040129
#VU32069 - Improper input validation
CVE-2017-14635		 CWE-20 High
No
No
 5.0.23-r0, 5.0.23-r1 21.09.2017 SB2017092129
SB2017092135


Showing elements 21 - 40 out of 39