Known vulnerabilities in OTRS - page 2

Vendor: otrs.org
Software: OTRS
Software CPE: cpe:2.3:a:otrs_org:open_ticket_request_system:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 75
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OTRS OTRS is affected by 75 known vulnerabilities: 14 high, 19 medium, 42 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU45200 - Permissions, Privileges, and Access Controls
CVE-2008-7279
CWE-264 Low
No
No
- 18.03.2011 SB2011031804
#VU45201 - Improper input validation
CVE-2008-7280
CWE-20 Medium
No
No
- 18.03.2011 SB2011031805
#VU45202 - Exposure of sensitive information to an unauthorized actor
CVE-2008-7281
CWE-200 Medium
No
No
- 18.03.2011 SB2011031805
#VU45203 - Permissions, Privileges, and Access Controls
CVE-2008-7282
CWE-264 Low
No
No
- 18.03.2011 SB2011031806
#VU45204 - Permissions, Privileges, and Access Controls
CVE-2008-7283
CWE-264 Low
No
No
- 18.03.2011 SB2011031806
#VU45205 - Permissions, Privileges, and Access Controls
CVE-2009-5055
CWE-264 Low
No
No
- 18.03.2011 SB2011031807
#VU45206 - Improper input validation
CVE-2009-5056
CWE-20 Low
No
No
- 18.03.2011 SB2011031808
#VU45207 - Cryptographic Issues
CVE-2009-5057
CWE-310 Medium
No
No
- 18.03.2011 SB2011031809
#VU45208 - Cryptographic Issues
CVE-2010-4758
CWE-310 Low
No
No
- 18.03.2011 SB2011031810
#VU45209 - Improper input validation
CVE-2010-4759
CWE-20 Low
No
No
- 18.03.2011 SB2011031811
#VU45210 - Exposure of sensitive information to an unauthorized actor
CVE-2010-4760
CWE-200 Low
No
No
- 18.03.2011 SB2011031811
#VU45211 - Permissions, Privileges, and Access Controls
CVE-2010-4761
CWE-264 Low
No
No
- 18.03.2011 SB2011031811
#VU45212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-4762
CWE-79 Low
No
No
- 18.03.2011 SB2011031812
#VU45213 - Permissions, Privileges, and Access Controls
CVE-2010-4763
CWE-264 Low
No
No
- 18.03.2011 SB2011031813
#VU45214 - Credentials Management
CVE-2010-4764
CWE-255 Medium
No
No
- 18.03.2011 SB2011031814
#VU45215 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2010-4765
CWE-362 Low
No
No
- 18.03.2011 SB2011031815
#VU45216 - Improper input validation
CVE-2010-4766
CWE-20 Medium
No
No
- 18.03.2011 SB2011031816
#VU45217 - Improper input validation
CVE-2010-4767
CWE-20 Medium
No
No
- 18.03.2011 SB2011031817
#VU45218 - Permissions, Privileges, and Access Controls
CVE-2010-4768
CWE-264 Low
No
No
- 18.03.2011 SB2011031103
#VU45232 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2011-0456
CWE-78 Medium
No
No
- 11.03.2011 SB2011031103


Showing elements 21 - 40 out of 75