Known vulnerabilities in OTRS - page 3

Vendor: otrs.org
Software: OTRS
Software CPE: cpe:2.3:a:otrs_org:open_ticket_request_system:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 75
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OTRS OTRS is affected by 75 known vulnerabilities: 14 high, 19 medium, 42 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30350 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4088
CWE-200 Medium
No
No
3.2.8 21.02.2020 SB2020022123
#VU36075 - Improper input validation
CVE-2018-20800
CWE-20 Medium
No
No
- 13.03.2019 SB2019031319
SB2021040139
#VU31198 - Improper input validation
CVE-2018-16586
CWE-20 Low
No
No
6.0.11 28.09.2018 SB2018092810
SB2018100405
SB2021040134
#VU31199 - Improper input validation
CVE-2018-16587
CWE-20 Medium
No
No
6.0.11 28.09.2018 SB2018092810
SB2018100405
SB2021040135
#VU31288 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10198
CWE-200 Low
No
No
6.0.7 06.06.2018 SB2018060611
#VU37774 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-16921
CWE-78 High
Available
No
- 08.12.2017 SB2017120819
SB2021040131
#VU32069 - Improper input validation
CVE-2017-14635
CWE-20 High
No
No
3.3.18, 4.0.25, 5.0.23 21.09.2017 SB2017092129
SB2017092135
#VU38932 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-9299
CWE-79 Low
No
No
- 29.05.2017 SB2017052917
#VU39643 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-9139
CWE-79 Low
No
No
- 17.02.2017 SB2017021716
#VU41851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2553
CWE-79 Low
No
No
- 02.04.2014 SB2014040204
#VU41985 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-1695
CWE-79 Low
Available
No
- 01.03.2014 SB2014030104
#VU42077 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-1471
CWE-89 Medium
No
No
- 04.02.2014 SB2014020403
#VU42078 - Cross-Site Request Forgery (CSRF)
CVE-2014-1694
CWE-352 Medium
No
No
- 04.02.2014 SB2014020403
#VU43394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4751
CWE-79 Low
Available
No
- 22.10.2012 SB2012102201
#VU44770 - Improper input validation
CVE-2011-2746
CWE-20 Low
No
No
- 29.08.2011 SB2011082906
#VU45119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-1518
CWE-79 Low
No
No
- 18.04.2011 SB2011041803
#VU45196 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-7275
CWE-79 Low
No
No
- 18.03.2011 SB2011031801
#VU45197 - Permissions, Privileges, and Access Controls
CVE-2008-7276
CWE-264 Medium
No
No
- 18.03.2011 SB2011031802
#VU45198 - Permissions, Privileges, and Access Controls
CVE-2008-7277
CWE-264 Low
No
No
- 18.03.2011 SB2011031802
#VU45199 - Improper input validation
CVE-2008-7278
CWE-20 Medium
No
No
- 18.03.2011 SB2011031803


Showing elements 41 - 60 out of 75