OT
Product
OTRS
10
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 6Low 2
Watch
Add OTRS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48188 | 9.1 | Jun 1 | SQL Injection via MySQL Quote Method Affected: 7.0.x; 8.0.x; 2023.x; 2024.x; 2025.x; 2026.x through 2026.3.x |
| CVE-2026-48209 | 7.1 | Jun 1 | Reflected XSS in authenticated agent context Affected: 7.0.x |
| CVE-2026-48208 | 6.5 | Jun 1 | Denial-of-Service via SVG Rendering in Ticket Affected: 7.0.x; 8.0.x; 2023.x; 2024.x; 2025.x; 2026.x through 2026.3.x |
| CVE-2022-39052 | 6.5 | Oct 17 | DoS attack using email Affected: 7.0.x through 7.0.39; 8.0.x through 8.0.26 |
| CVE-2026-48187 | 5.7 | Jun 1 | Email with special content can lead to DoS Affected: 8.0.x; 2023.x; 2024.x; 2025.x; 2026.x through 2026.3.x |
| CVE-2026-48189 | 5.7 | Jun 1 | Bypass DedicatedAgentToCustomerGroups Setting Affected: 7.0.x; 8.0.x; 2023.x; 2024.x; 2025.x; 2026.x through 2026.3.x |
| CVE-2026-48210 | 5.7 | May 31 | Possible information disclosure via External Interface Affected: 2026.3.1 |
| CVE-2026-6060 | 4.5 | Apr 20 | Possible DoS via SQL Box Affected: 7.0.x; 8.0.x; 2023.x; 2024.x; 2025.x; 2026.x through 2026.2.x |
| CVE-2026-48190 | 3.5 | Jun 1 | Incorrect handling of permissions in External Interface Config Item List module Affected: 7.0.x; 8.0.x; 2023.x; 2024.x; 2025.x; 2026.x through 2026.3.x |
| CVE-2026-48191 | 3.5 | Jun 1 | Wrong Permission Handling in Document Search Article Meta Filters Affected: 8.0.x; 2023.x; 2024.x; 2025.x; 2026.x through 2026.3.x |
Showing 10