Known vulnerabilities in OTRS - page 3

Vendor: otrs.org
Software: OTRS
Software CPE: cpe:2.3:a:otrs_org:open_ticket_request_system:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 75
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OTRS OTRS is affected by 75 known vulnerabilities: 14 high, 19 medium, 42 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU38932 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-9299
CWE-79 Low
No
No
- 29.05.2017 SB2017052917
#VU39643 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9139
CWE-79 Low
No
No
- 17.02.2017 SB2017021716
#VU41851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2553
CWE-79 Low
No
No
- 02.04.2014 SB2014040204
#VU41985 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-1695
CWE-79 Low
Available
No
- 01.03.2014 SB2014030104
#VU42077 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-1471
CWE-89 Medium
No
No
- 04.02.2014 SB2014020403
#VU42078 - Cross-Site Request Forgery (CSRF)
CVE-2014-1694
CWE-352 Medium
No
No
- 04.02.2014 SB2014020403
#VU43394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4751
CWE-79 Low
Available
No
- 22.10.2012 SB2012102201
#VU44770 - Improper input validation
CVE-2011-2746
CWE-20 Low
No
No
- 29.08.2011 SB2011082906
#VU45119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-1518
CWE-79 Low
No
No
- 18.04.2011 SB2011041803
#VU45199 - Improper input validation
CVE-2008-7278
CWE-20 Medium
No
No
- 18.03.2011 SB2011031803
#VU45203 - Permissions, Privileges, and Access Controls
CVE-2008-7282
CWE-264 Low
No
No
- 18.03.2011 SB2011031806
#VU45208 - Cryptographic Issues
CVE-2010-4758
CWE-310 Low
No
No
- 18.03.2011 SB2011031810
#VU45209 - Improper input validation
CVE-2010-4759
CWE-20 Low
No
No
- 18.03.2011 SB2011031811
#VU45212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-4762
CWE-79 Low
No
No
- 18.03.2011 SB2011031812
#VU45213 - Permissions, Privileges, and Access Controls
CVE-2010-4763
CWE-264 Low
No
No
- 18.03.2011 SB2011031813
#VU45214 - Credentials Management
CVE-2010-4764
CWE-255 Medium
No
No
- 18.03.2011 SB2011031814
#VU45215 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2010-4765
CWE-362 Low
No
No
- 18.03.2011 SB2011031815
#VU45216 - Improper input validation
CVE-2010-4766
CWE-20 Medium
No
No
- 18.03.2011 SB2011031816
#VU45217 - Improper input validation
CVE-2010-4767
CWE-20 Medium
No
No
- 18.03.2011 SB2011031817
#VU45219 - Cryptographic Issues
CVE-2011-1433
CWE-310 Medium
No
No
- 18.03.2011 SB2011031818


Showing elements 41 - 60 out of 75