Known vulnerabilities in OTRS - page 4

Vendor: otrs.org
Software: OTRS
Software CPE: cpe:2.3:a:otrs_org:open_ticket_request_system:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 75
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OTRS OTRS is affected by 75 known vulnerabilities: 14 high, 19 medium, 42 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30349 - Exposure of sensitive information to an unauthorized actor
CVE-2013-3551
CWE-200 Medium
No
No
3.2.7 21.02.2020 SB2020022122
#VU16057 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19142
CWE-79 Low
No
No
6.0.13 26.11.2018 SB2018112610
#VU15368 - Improper Access Control
CVE-2018-14593
CWE-284 Low
No
No
4.0.31, 5.0.29, 6.0.10 15.10.2018 SB2018080406
SB2018100405
SB2021040133
#VU10190 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-5117
CWE-451 Low
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU10183 - Use After Free
CVE-2018-5096
CWE-416 High
No
No
- 24.01.2018 SB2018012501
SB2018012504
SB2018012505
and 11 more
#VU10178 - Integer overflow
CVE-2018-5095
CWE-190 High
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU10177 - Use After Free
CVE-2018-5097
CWE-416 High
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU10176 - Use After Free
CVE-2018-5098
CWE-416 High
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU10175 - Use After Free
CVE-2018-5099
CWE-416 High
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU10172 - Use After Free
CVE-2018-5102
CWE-416 High
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU10171 - Use After Free
CVE-2018-5103
CWE-416 High
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU10170 - Use After Free
CVE-2018-5104
CWE-416 High
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 14 more
#VU10167 - Memory corruption
CVE-2018-5089
CWE-119 High
No
No
- 24.01.2018 SB2018012404
SB2018012409
SB2018012501
and 15 more
#VU9423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2017-16664
CWE-78 High
No
No
- 27.11.2017 SB2017112126
SB2017112304
SB2021040129
#VU9422 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15864
CWE-200 Low
No
No
- 24.11.2017 SB2017111429
SB2017112304


Showing elements 61 - 80 out of 75