Vulnerabilities in OTRS GmbH (former OTRS AG)

9 results

CVE-2026-78355HIGHPath Traversal in SendSupportBundle allows File Deletion Outside the Intended DirectoryEPSS 0.7%CVE-2026-93582CRITICALAuthentication Bypass via Spoofed Remote-User Header in HTTP Basic AuthenticationEPSS 0.4%CVE-2026-78357CRITICALInsufficient Session Revocation for JWT AuthenticationEPSS 0.3%CVE-2026-78356MEDIUMUnauthenticated Disclosure of Agent Frontend ConfigurationEPSS 0.3%CVE-2026-93581MEDIUMInsufficient Neutralization of Formula Elements in CSV ExportsEPSS 0.2%CVE-2026-78359MEDIUMDuplicate Identity / Identity Shadowing across CustomerUser backendsEPSS 0.2%CVE-2026-48212MEDIUMStored XSS in external pagesEPSS 0.1%CVE-2026-78358MEDIUMCross-Site Request Forgery in Administrative ActionsEPSS 0.1%CVE-2026-48211MEDIUMCross-Site Request Forgery in Import/Export Admin consoleEPSS 0.1%