OT
Product
Otrs
142
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 23Medium 68Low 2
Watch
Add Otrs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48208 | 6.5 | Jun 1 | Denial-of-Service via SVG Rendering in Ticket Affected: through 6.0.32; 7.0.0 through 8.0.37; 2023.0.0 before 2026.4.1 |
| CVE-2025-24387 | 6.5 | Mar 10 | A vulnerability in OTRS Application Server allows session hijacking due to missing attributes for sensitive cookie settings in HTTPS sessions Affected: 7.0.0 through 2025.1.2 |
| CVE-2024-23792 | 6.5 | Jan 29 | When adding attachments to ticket comments, another user can add attachments as well impersonating the orginal user Affected: 7.0.0 before 7.0.49; 8.0.0 before 2024.1.1 |
| CVE-2022-39052 | 6.5 | Oct 17 | DoS attack using email Affected: 6.0.0 through 6.0.32; 7.0.0 before 7.0.39; 8.0.0 before 8.0.26 |
| CVE-2021-21440 | 6.5 | Jul 26 | Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden Affected: 6.0.0 through 6.0.1; 7.0.0 through 7.0.27; 8.0.0 through 8.0.14 |
| CVE-2021-21439 | 6.5 | Jun 14 | DoS attack can be performed when an email contains specially designed URL in the body Affected: 6.0.1 through 6.0.30; 7.0.0 before 7.0.27; 8.0.0 before 8.0.14 |
| CVE-2021-21435 | 6.5 | Feb 8 | Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface Affected: 6.0.0 through 6.0.30; 7.0.0 through 7.0.23; 8.0.0 through 8.0.10 |
| CVE-2013-4088 | 6.5 | Feb 21 | Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets,… Affected: 3.0.0 before 3.0.21; 3.1.0 before 3.1.17; 3.2.0 before 3.2.8 |
| CVE-2013-3551 | 6.5 | Feb 21 | Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.2.x before 3.2.7, and OTRS ITSM 3.0.x before 3.0.8, 3.1.x… Affected: 3.0.0 before 3.0.20; 3.1.0 before 3.1.16; 3.2.0 before 3.2.7 |
| CVE-2019-13458 | 6.5 | Aug 21 | An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19 Affected: 5.0.0 through 5.0.36; 6.0.0 through 6.0.19; 7.0.0 through 7.0.8 |
| CVE-2019-12746 | 6.5 | Aug 21 | An issue was discovered in Open Ticket Request System (OTRS) Community Edition 5.0.x through 5.0.36 and 6.0.x through 6.0.19 Affected: 5.0.0 through 5.0.36; 6.0.0 through 6.0.19 |
| CVE-2019-9892 | 6.5 | May 22 | An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6 Affected: 5.0.0 through 5.0.34; 6.0.0 through 6.0.17; 7.0.0 through 7.0.6 |
| CVE-2018-20800 | 6.5 | Mar 13 | An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13 Affected: 5.0.31; 6.0.13 |
| CVE-2017-16854 | 6.5 | Dec 8 | In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use the ticket search… Affected: 3.3.0 through 3.3.20; after 4.0.0 through 4.0.26; 5.0.0 through 5.0.24; 6.0.0 through 6.0.1 |
| CVE-2018-17883 | 6.1 | Apr 16 | An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12 Affected: 6.0.0 before 6.0.12 |
| CVE-2023-1248 | 6.1 | Mar 20 | Improper Input Validation vulnerability in OTRS AG OTRS (Ticket Actions modules), OTRS AG ((OTRS)) Community Edition (Ticket Actions modules) allows Cross-Site Scripting… Affected: 6.0.1 through 6.0.34; 7.0.0 before 7.0.42 |
| CVE-2021-36092 | 6.1 | Jul 26 | It's possible to create an email which contains specially crafted link and it can be used to perform XSS attack Affected: 6.0.0 through 6.0.32; 7.0.0 before 7.0.28; 8.0.0 before 8.0.15 |
| CVE-2020-1766 | 6.1 | Jan 10 | Due to improper handling of uploaded images it is possible in very unlikely and rare conditions to force the agents browser to execute malicious javascript from a special crafted… Affected: 5.0.0 through 5.0.39; 6.0.0 through 6.0.24; 7.0.0 through 7.0.13 |
| CVE-2017-9299 | 6.1 | May 29 | Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as demonstrated by OrderBy=[XSS] and Direction=[XSS] attacks Affected: 3.3.9 |
| CVE-2016-9139 | 6.1 | Feb 17 | Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allows remote attackers to inject… Affected: 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +34 more |
| CVE-2026-48187 | 5.7 | Jun 1 | Email with special content can lead to DoS Affected: through 6.0.32; 7.0.0 through 8.0.37; 2023.0.0 before 2026.4.1 |
| CVE-2026-48189 | 5.7 | Jun 1 | Bypass DedicatedAgentToCustomerGroups Setting Affected: 7.0.0 through 8.0.37; 2023.0.0 before 2026.4.1 |
| CVE-2026-48210 | 5.7 | May 31 | Possible information disclosure via External Interface Affected: 2026.3.1 |
| CVE-2023-5421 | 5.5 | Oct 16 | An attacker who is logged into OTRS as an user with privileges to create and change customer user data may manipulate the CustomerID field to execute JavaScript code that runs … Affected: 6.0.0 through 6.0.34; 7.0.0 before 7.0.47; 8.0.0 before 8.0.37 |
| CVE-2022-0475 | 5.4 | Mar 21 | Malicious translator is able to inject JavaScript code in few translatable strings (where HTML is allowed) Affected: 7.0.0 through 7.0.32; 8.0.0 through 8.0.19 |
| CVE-2021-36094 | 5.4 | Sep 6 | It's possible to craft a request for appointment edit screen, which could lead to the XSS attack Affected: 6.0.1 and later; 7.0.0 before 7.0.29 |
| CVE-2013-4718 | 5.4 | Aug 9 | Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated… Affected: 3.0.0 through 3.0.21; 3.1.0 through 3.1.17; 3.2.0 through 3.2.8 |
| CVE-2020-1771 | 5.4 | Mar 27 | Attacker is able craft an article with a link to the customer address book with malicious content (JavaScript) Affected: 5.0.0 through 5.0.41; 6.0.0 through 6.0.26; 7.0.0 through 7.0.15 |
| CVE-2019-16375 | 5.4 | Mar 19 | An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22 Affected: 5.0.0 through 5.0.37; 6.0.0 through 6.0.22; 7.0.0 through 7.0.11 |
| CVE-2020-1768 | 5.4 | Feb 7 | The external frontend system uses numerous background calls to the backend Affected: 7.0.0 through 7.0.14 |
| CVE-2019-10067 | 5.4 | May 22 | An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6 and Community Edition 5.0.x through 5.0.35 and 6.0.x through 6.0.17 Affected: 5.0.0 through 5.0.35; 6.0.0 through 6.0.17; 7.0.0 through 7.0.6 |
| CVE-2019-10066 | 5.4 | May 22 | An issue was discovered in Open Ticket Request System (OTRS) 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x through 5.0.12 Affected: 5.0.0 through 5.0.12; 6.0.0 through 6.0.17; 7.0.0 through 7.0.6 |
| CVE-2019-9752 | 5.4 | Mar 13 | An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4 Affected: 5.0.0 before 5.0.34; 6.0.0 before 6.0.16; 7.0.0 before 7.0.4 |
| CVE-2024-6540 | 5.3 | Jul 15 | Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets… Affected: 8.0.0 before 2024.5.2 |
| CVE-2023-38059 | 5.3 | Oct 16 | The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the payload Affected: 6.0.0 through 6.0.34; 7.0.0 before 7.0.47; 8.0.0 before 8.0.37 |
| CVE-2022-32741 | 5.3 | Jun 13 | Attacker is able to determine if the provided username exists (and it's valid) using Request New Password feature, based on the response time Affected: 7.0.0 before 7.0.35; 8.0.0 before 8.0.23 |
| CVE-2022-32740 | 5.3 | Jun 13 | A reply to a forwarded email article by a 3rd party could unintensionally expose the email content to the ticket customer under certain circumstances Affected: 7.0.0 before 7.0.35; 8.0.0 before 8.0.23 |
| CVE-2022-32739 | 5.3 | Jun 13 | When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number Affected: 7.0.0 before 7.0.35; 8.0.0 before 8.0.23 |
| CVE-2021-36095 | 5.3 | Sep 6 | Malicious attacker is able to find out valid user logins by using the "lost password" feature Affected: 6.0.1 and later; 7.0.0 before 7.0.29 |
| CVE-2021-36093 | 5.3 | Sep 6 | It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS Affected: 6.0.1 and later; 7.0.0 before 7.0.29; 8.0.0 before 8.0.16 |
| CVE-2020-1777 | 5.3 | Oct 15 | Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is… Affected: 7.0.0 through 7.0.21; 8.0.0 through 8.0.6 |
| CVE-2020-1765 | 5.3 | Jan 10 | An improper control of parameters allows the spoofing of the from fields of the following screens: AgentTicketCompose, AgentTicketForward, AgentTicketBounce and… Affected: 5.0.0 through 5.0.39; 6.0.0 through 6.0.24; 7.0.0 through 7.0.13 |
| CVE-2019-12497 | 5.3 | Jun 17 | An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36 Affected: 5.0.0 through 5.0.36; 6.0.0 through 6.0.19; 7.0.0 through 7.0.8 |
| CVE-2021-36096 | 4.9 | Sep 6 | Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden Affected: 6.0.1 and later; 7.0.0 before 7.0.29; 8.0.0 before 8.0.16 |
| CVE-2020-1774 | 4.9 | Apr 28 | When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys Affected: 5.0.0 through 5.0.42; 6.0.0 through 6.0.27; 7.0.0 through 7.0.16 |
| CVE-2022-39050 | 4.8 | Sep 5 | An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clicking the customer URL… Affected: 6.0.0 through 6.0.32; 7.0.0 before 7.0.37; 8.0.0 before 8.0.25 |
| CVE-2022-39049 | 4.8 | Sep 5 | An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS Affected: 6.0.0 through 6.0.32; 7.0.0 before 7.0.37; 8.0.0 before 8.0.25 |
| CVE-2022-0473 | 4.8 | Feb 7 | OTRS administrators can configure dynamic field and inject malicious JavaScript code in the error message of the regular expression check Affected: 7.0.0 before 7.0.32 |
| CVE-2019-9751 | 4.8 | Mar 13 | An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5 Affected: 6.0.0 before 6.0.17; 7.0.0 before 7.0.5 |
| CVE-2018-11563 | 4.6 | Jul 8 | An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7 Affected: 6.0.0 through 6.0.7 |