Vulnerabilities in OTRS AG
81 resultsCVE-2020-1774MEDIUMInformation disclosureEPSS 0.9%CVE-2020-1777MEDIUMAgent names disclosed in chat featureEPSS 0.8%CVE-2022-39051MEDIUMPerl Code execution in Template ToolkitEPSS 0.8%CVE-2020-1775LOWInformation disclosure in external interfaceEPSS 0.8%CVE-2021-21443LOWUnautorized listing of the customer user emailsEPSS 0.8%CVE-2021-21440MEDIUMSupport Bundle includes S/Mime and PGP keysEPSS 0.8%CVE-2024-23793MEDIUMUpload of files outside application directoryEPSS 0.8%CVE-2021-21436LOWAgent is able to link customer's Config Items without permissionEPSS 0.8%CVE-2022-4427MEDIUMSQL Injection via OTRS Search APIEPSS 0.8%CVE-2022-39052HIGHDoS attack using emailEPSS 0.8%CVE-2020-1768MEDIUMExternal Interface does not invalidate sessionEPSS 0.7%CVE-2026-48188CRITICALSQL Injection via MySQL Quote MethodEPSS 0.7%CVE-2021-36092MEDIUMXSS attack using special link in emailEPSS 0.7%CVE-2021-36091LOWUnautorized access to the calendar appointmentsEPSS 0.7%CVE-2023-38060MEDIUMHost header injection by attachments in web serviceEPSS 0.7%CVE-2021-21437LOWConfig Items are shown to users without permissionEPSS 0.7%CVE-2021-21434LOWXSS in Survey ModuleEPSS 0.7%CVE-2022-39049LOWPossible XSS in Admin InterfaceEPSS 0.7%CVE-2020-1778MEDIUMBypassing user account validationEPSS 0.7%CVE-2023-6254HIGHPassword is send back to clientEPSS 0.6%