Vulnerabilities in OTRS AG
81 resultsCVE-2020-1772MEDIUMInformation DisclosureEPSS 1.6%CVE-2020-1773HIGHSession / Password / Password token leakEPSS 1.5%CVE-2020-1765LOWSpoofing of From field in several screensEPSS 1.5%CVE-2021-36100MEDIUMAuthenticated remote code executionEPSS 1.3%CVE-2021-21435MEDIUMInformation exposure in PDF exportEPSS 1.3%CVE-2020-1770LOWInformation disclosure in support bundle filesEPSS 1.3%CVE-2020-1766LOWImproper handling of uploaded inline imagesEPSS 1.2%CVE-2020-1769LOWAutocomplete in the form login screensEPSS 1.2%CVE-2020-1767LOWPossible to send drafted messages as wrong agentEPSS 1.2%CVE-2021-36093MEDIUMDoS attack using PostMaster filtersEPSS 1.1%CVE-2021-21441HIGHXSS in the ticket overview screensEPSS 1.1%CVE-2020-1771MEDIUMPossible XSS in Customer user address bookEPSS 1.0%CVE-2020-1779MEDIUMDynamic templates reveal sensitive data when OTRS tags are usedEPSS 1.0%CVE-2021-36095MEDIUMUser enumeration issue using "lost password" featureEPSS 0.9%CVE-2022-32739LOWOTRS version number is always in the exported ICS filesEPSS 0.9%CVE-2020-1776LOWInvalidating or changing user does not invalidate sessionEPSS 0.9%CVE-2022-32740LOWInformation disclosure in the External InterfaceEPSS 0.9%CVE-2021-21439MEDIUMPossible DoS attack using a special crafted URL in email bodyEPSS 0.9%CVE-2022-32741MEDIUMInformation disclosure in Request New Password featureEPSS 0.9%CVE-2023-38056HIGHCode execution via System Configuration EPSS 0.9%