Known vulnerabilities in OTRS - page 4

Vendor: otrs.org
Software: OTRS
Software CPE: cpe:2.3:a:otrs_org:open_ticket_request_system:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 75
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OTRS OTRS is affected by 75 known vulnerabilities: 14 high, 19 medium, 42 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU45196 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2008-7275
CWE-79 Low
No
No
- 18.03.2011 SB2011031801
#VU45197 - Permissions, Privileges, and Access Controls
CVE-2008-7276
CWE-264 Medium
No
No
- 18.03.2011 SB2011031802
#VU45198 - Permissions, Privileges, and Access Controls
CVE-2008-7277
CWE-264 Low
No
No
- 18.03.2011 SB2011031802
#VU45200 - Permissions, Privileges, and Access Controls
CVE-2008-7279
CWE-264 Low
No
No
- 18.03.2011 SB2011031804
#VU45201 - Improper input validation
CVE-2008-7280
CWE-20 Medium
No
No
- 18.03.2011 SB2011031805
#VU45202 - Exposure of sensitive information to an unauthorized actor
CVE-2008-7281
CWE-200 Medium
No
No
- 18.03.2011 SB2011031805
#VU45204 - Permissions, Privileges, and Access Controls
CVE-2008-7283
CWE-264 Low
No
No
- 18.03.2011 SB2011031806
#VU45205 - Permissions, Privileges, and Access Controls
CVE-2009-5055
CWE-264 Low
No
No
- 18.03.2011 SB2011031807
#VU45206 - Improper input validation
CVE-2009-5056
CWE-20 Low
No
No
- 18.03.2011 SB2011031808
#VU45207 - Cryptographic Issues
CVE-2009-5057
CWE-310 Medium
No
No
- 18.03.2011 SB2011031809
#VU45210 - Exposure of sensitive information to an unauthorized actor
CVE-2010-4760
CWE-200 Low
No
No
- 18.03.2011 SB2011031811
#VU45211 - Permissions, Privileges, and Access Controls
CVE-2010-4761
CWE-264 Low
No
No
- 18.03.2011 SB2011031811
#VU45218 - Permissions, Privileges, and Access Controls
CVE-2010-4768
CWE-264 Low
No
No
- 18.03.2011 SB2011031103
#VU45232 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2011-0456
CWE-78 Medium
No
No
- 11.03.2011 SB2011031103
#VU45421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2010-4071
CWE-79 Low
No
No
- 20.01.2011 SB2011012001


Showing elements 61 - 80 out of 75