CVE-2014-2554: OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element

Unscored severity · published Apr 23, 2014

CVE-2014-2554

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element

–

CVSS

1.5%

EPSS

On KEV

Description

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.5% · higher than 74% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

12.3; 13.1 · source: NVD

3.1.0; 3.1.1; 3.1.2; 3.1.3; 3.1.4; 3.1.5; +34 more · source: NVD

Affected product

Opensuse

References