Known vulnerabilities in OTRS

Vendor: otrs.org
Software: OTRS
Software CPE: cpe:2.3:a:otrs_org:open_ticket_request_system:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 75
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OTRS OTRS is affected by 75 known vulnerabilities: 14 high, 19 medium, 42 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67158 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39049
CWE-79 Low
No
No
7.0.37, 8.0.25 09.09.2022 SB2022090921
#VU67157 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39050
CWE-79 Low
No
No
7.0.37, 8.0.25 09.09.2022 SB2022090921
#VU67155 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-39051
CWE-94 Low
No
No
7.0.37, 8.0.25 09.09.2022 SB2022090921
#VU61568 - Exposure of sensitive information to an unauthorized actor
CVE-2022-1004
CWE-200 Low
No
No
7.0.33, 8.0.20 23.03.2022 SB2022032310
#VU61567 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0475
CWE-79 Low
No
No
7.0.33, 8.0.20 23.03.2022 SB2022032310
#VU51872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21434
CWE-79 Low
No
No
- 08.02.2021 SB2021020814
SB2021040166
#VU48718 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1778
CWE-200 Low
No
No
8.0.10 23.11.2020 SB2020113016
#VU51871 - Insufficient Session Expiration
CVE-2020-1776
CWE-613 Low
No
No
- 20.07.2020 SB2020072024
SB2021040165
#VU51866 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1769
CWE-200 Low
No
No
- 27.03.2020 SB2020032729
SB2021040159
#VU51867 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1770
CWE-200 Low
No
No
- 27.03.2020 SB2020032730
SB2021040160
#VU51868 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1771
CWE-79 Low
No
No
- 27.03.2020 SB2020032731
SB2021040161
#VU51869 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1772
CWE-200 Medium
No
No
- 27.03.2020 SB2020032732
SB2021040162
#VU51870 - Insufficient Entropy
CVE-2020-1773
CWE-331 High
No
No
- 27.03.2020 SB2020032733
SB2021040163
#VU30349 - Exposure of sensitive information to an unauthorized actor
CVE-2013-3551
CWE-200 Medium
No
No
3.2.7 21.02.2020 SB2020022122
#VU30350 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4088
CWE-200 Medium
No
No
3.2.8 21.02.2020 SB2020022123
#VU51863 - Improper input validation
CVE-2020-1765
CWE-20 Medium
No
No
- 10.01.2020 SB2020011016
SB2021040156
#VU51864 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1766
CWE-79 Low
No
No
- 10.01.2020 SB2020011017
SB2021040157
#VU51865 - Improper input validation
CVE-2020-1767
CWE-20 Low
No
No
- 10.01.2020 SB2020011018
SB2021040158
#VU51861 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-18180
CWE-835 Medium
No
No
- 05.12.2019 SB2019120536
SB2021040151
#VU36075 - Improper input validation
CVE-2018-20800
CWE-20 Medium
No
No
- 13.03.2019 SB2019031319
SB2021040139


Showing elements 1 - 20 out of 75