Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

((OTRS)) Community Edition — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in ((OTRS)) Community Edition, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for OTRS Community Edition, a customer support suite, focusing on the weakness class and associated security tags. It collects records of disclosed security flaws, covering the period from the product’s initial release through recent advisory publications. Here, you can track vendor-issued advisories, analyze specific weakness categories, and review the product’s complete vulnerability history without navigating between individual incident pages. The dataset excludes unconfirmed reports and includes only validated issues published through official channels.

Vendor: OTRS AG

CVE ID Title CVSS Severity Published
CVE-2021-36096 Support Bundle includes S/Mime and PGP secret or PIN CWE-200 5.2 Medium 2021-09-06
CVE-2021-36095 User enumeration issue using "lost password" feature CWE-200 5.3 Medium 2021-09-06
CVE-2021-36094 XSS attack in appointment edit popup screen CWE-79 5.7 Medium 2021-09-06
CVE-2021-36093 DoS attack using PostMaster filters CWE-185 5.3 Medium 2021-09-06
CVE-2021-36092 XSS attack using special link in email CWE-79 6.5 Medium 2021-07-26
CVE-2021-36091 Unautorized access to the calendar appointments CWE-200 3.5 Low 2021-07-26
CVE-2021-21443 Unautorized listing of the customer user emails CWE-200 3.5 Low 2021-07-26
CVE-2021-21440 Support Bundle includes S/Mime and PGP keys CWE-200 5.2 Medium 2021-07-26
CVE-2021-21441 XSS in the ticket overview screens CWE-79 7.5 High 2021-06-16
CVE-2021-21439 Possible DoS attack using a special crafted URL in email body CWE-754 6.5 Medium 2021-06-14
CVE-2020-1776 Invalidating or changing user does not invalidate session CWE-613 3.5 Low 2020-07-20
CVE-2020-1774 Information disclosure CWE-201 4.5 Medium 2020-04-28
CVE-2020-1773 Session / Password / Password token leak CWE-331 7.3 High 2020-03-27
CVE-2020-1772 Information Disclosure CWE-155 6.5 Medium 2020-03-27
CVE-2020-1771 Possible XSS in Customer user address book CWE-79 4.6 Medium 2020-03-27
CVE-2020-1770 Information disclosure in support bundle files CWE-201 2.4 Low 2020-03-27
CVE-2020-1769 Autocomplete in the form login screens CWE-16 3.5 Low 2020-03-27
CVE-2020-1767 Possible to send drafted messages as wrong agent 3.5 Low 2020-01-10
CVE-2020-1766 Improper handling of uploaded inline images CWE-79 2.0 Low 2020-01-10
CVE-2020-1765 Spoofing of From field in several screens CWE-472 3.5 Low 2020-01-10

All 20 known CVE vulnerabilities affecting ((OTRS)) Community Edition with full Chinese analysis, references, and POCs where available.