Login Request a demo
OT
Product
Otrs
by Otrs · last CVE Jun 1, 2026
142
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities142In the news0Timeline
Severity mix
Critical 4High 23Medium 68Low 2
Severity
All severities142Critical4High23Medium68Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Otrs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-23790
9.8
0%
Jan 29
Improper Input Validation vulnerability in the upload functionality for user avatars allows functionality misuse due to missing check of filetypes
Affected: 7.0.0 before 7.0.49; 8.0.0 before 2024.1.1
CVE-2022-4427
9.8
1%
Dec 19
Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7.0.1…
Affected: 6.0.1 through 6.0.34; 7.0.1 before 7.0.40; 8.0.1 before 8.0.28; 7.0.40; 8.0.28
CVE-2026-48188
9.1
1%
Jun 1
SQL Injection via MySQL Quote Method
Affected: through 6.0.32; 7.0.0 through 8.0.37; 2023.0.0 before 2026.4.1
CVE-2023-5422
9.1
0%
Oct 16
The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication
Affected: 6.0.0 through 6.0.34; 7.0.0 before 7.0.47; 8.0.0 before 8.0.37
Showing 4