Known vulnerabilities in OTRS Community Edition
Vendor:
OTRS AG
Software:
OTRS Community Edition
Software CPE:
cpe:2.3:a:otrs_ag:otrs_community_edition:*:*:*:*:*:*:*:*
Website:
https://otrs.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU56404 - Exposure of sensitive information to an unauthorized actor CVE-2021-36096 |
CWE-200 | Medium | - | 08.09.2021 |
SB2021090815 |
||
| #VU56403 - Exposure of sensitive information to an unauthorized actor CVE-2021-36095 |
CWE-200 | Medium | - | 08.09.2021 |
SB2021090815 |
||
| #VU56402 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-36094 |
CWE-79 | Low | - | 08.09.2021 |
SB2021090815 |
||
| #VU56400 - Improper input validation CVE-2021-36093 |
CWE-20 | Medium | - | 08.09.2021 |
SB2021090815 |