OA
Vendor
OTRS AG
17
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-48187 | OT OTRS OTRS AG | 5.7 | Jun 1 | Email with special content can lead to DoS |
| CVE-2026-48188 | OT OTRS OTRS AG | 9.1 | Jun 1 | SQL Injection via MySQL Quote Method |
| CVE-2026-48189 | OT OTRS OTRS AG | 5.7 | Jun 1 | Bypass DedicatedAgentToCustomerGroups Setting |
| CVE-2026-48190 | OT OTRS OTRS AG | 3.5 | Jun 1 | Incorrect handling of permissions in External Interface Config Item List module |
| CVE-2026-48191 | OT OTRS OTRS AG | 3.5 | Jun 1 | Wrong Permission Handling in Document Search Article Meta Filters |
| CVE-2026-48208 | OT OTRS OTRS AG | 6.5 | Jun 1 | Denial-of-Service via SVG Rendering in Ticket |
| CVE-2026-48209 | OT OTRS OTRS AG | 7.1 | Jun 1 | Reflected XSS in authenticated agent context |
| CVE-2026-48210 | OT OTRS OTRS AG | 5.7 | May 31 | Possible information disclosure via External Interface |
| CVE-2026-6060 | OT OTRS OTRS AG | 4.5 | Apr 20 | Possible DoS via SQL Box |
| CVE-2025-24391 | OT OTRS OTRS AG | 5.3 | Jul 14 | Possible user enumeration |
| CVE-2025-24388 | OC ((OTRS)) Community Edition OTRS AG | 3.8 | Jun 16 | Unsafe handling of AJAX calls |
| CVE-2022-39052 | OT OTRS OTRS AG | 6.5 | Oct 17 | DoS attack using email |