Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

OTRS — Vulnerabilities & Security Advisories 47

All 47 CVE vulnerabilities found in OTRS, with AI-generated Chinese analysis, references, and POCs.

Vendor: OTRS AG

CVE IDTitleCVSSSeverityPublished
CVE-2022-39052 DoS attack using email CWE-835 7.5 High2022-10-17
CVE-2022-39051 Perl Code execution in Template Toolkit CWE-913 6.8 Medium2022-09-05
CVE-2022-39050 Possible XSS stored in customer information CWE-79 4.6 Medium2022-09-05
CVE-2022-39049 Possible XSS in Admin Interface CWE-79 3.5 Low2022-09-05
CVE-2022-32741 Information disclosure in Request New Password feature CWE-200 5.3 Medium2022-06-13
CVE-2022-32740 Information disclosure in the External Interface CWE-200 3.5 Low2022-06-13
CVE-2022-32739 OTRS version number is always in the exported ICS files CWE-200 3.5 Low2022-06-13
CVE-2022-1004 Information disclosure in the External Interface CWE-200 4.3 Medium2022-03-21
CVE-2022-0475 Possible XSS attack via translation CWE-79 3.5 Low2022-03-21
CVE-2021-36100 Authenticated remote code execution 6.4 Medium2022-03-21
CVE-2022-0473 Dynamic field error message is vulnerable to XSS CWE-79 3.8 Low2022-02-07
CVE-2021-36097 Agents are able to lock the ticket without the "Owner" permission CWE-266 3.5 Low2021-10-18
CVE-2021-21435 Information exposure in PDF export CWE-200 5.7 Medium2021-02-08
CVE-2020-1778 Bypassing user account validation CWE-287 4.1 Medium2020-11-23
CVE-2020-1777 Agent names disclosed in chat feature CWE-200 4.3 Medium2020-10-15
CVE-2020-1775 Information disclosure in external interface CWE-200 3.5 Low2020-06-08
CVE-2020-1768 External Interface does not invalidate session CWE-613 5.4 Medium2020-02-07

All 47 known CVE vulnerabilities affecting OTRS with full Chinese analysis, references, and POCs where available.