Vulnerabilities in OTRS AG
81 resultsCVE-2022-0474LOWDisclosure of mail addressesEPSS 0.6%CVE-2021-21438LOWFAQ articles are shown to users without permissionEPSS 0.6%CVE-2022-1004MEDIUMInformation disclosure in the External InterfaceEPSS 0.6%CVE-2021-21442MEDIUMXSS vulnerability in Time AccountingEPSS 0.6%CVE-2021-36094MEDIUMXSS attack in appointment edit popup screenEPSS 0.6%CVE-2022-39050MEDIUMPossible XSS stored in customer informationEPSS 0.6%CVE-2023-38059MEDIUMExternal pictures can be loaded even if not allowed by configurationEPSS 0.5%CVE-2023-2534HIGHInformation disclouse and DoS via websocket push eventsEPSS 0.5%CVE-2021-36097LOWAgents are able to lock the ticket without the "Owner" permissionEPSS 0.5%CVE-2024-23791MEDIUMUnnecessary data is written to log if issues during indexing occursEPSS 0.5%CVE-2022-0473LOWDynamic field error message is vulnerable to XSSEPSS 0.5%CVE-2021-36096MEDIUMSupport Bundle includes S/Mime and PGP secret or PINEPSS 0.4%CVE-2022-0475LOWPossible XSS attack via translationEPSS 0.4%CVE-2023-5421LOW Possible XSS execution in customer information EPSS 0.4%CVE-2023-1248MEDIUM Possible XSS in Ticket ActionsEPSS 0.4%CVE-2024-43442MEDIUMStored XSS in System ConfigurationEPSS 0.4%CVE-2024-6540MEDIUMInformation exlosure in external interfaceEPSS 0.4%CVE-2023-38057MEDIUMXSS stored in survey answersEPSS 0.4%CVE-2024-43444HIGHPasswords are written to Admin Log ModuleEPSS 0.4%CVE-2023-38058MEDIUMTickets can be moved without permissionsEPSS 0.4%