Login Request a demo
FA
Product
Faq
by Otrs · last CVE Mar 22, 2021
4
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities4Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Faq to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-5843
9.4
3%
Sep 17
Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTRS) allow remote attackers to…
Affected: 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; 2.0.6; +24 more
CVE-2013-2625
6.5
1%
Nov 27
An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8
Affected: 2.0.0 before 2.0.8; 2.1.0 before 2.1.4; 2.2.0 before 2.2.3
CVE-2013-2637
6.1
4%
Feb 12
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles,…
Affected: before 2.0.8; 2.1.0 before 2.1.4
CVE-2021-21438
4.3
1%
Mar 22
Agents are able to see linked FAQ articles without permissions (defined in FAQ Category)
Affected: 6.0.0 before 6.0.29
Showing 4