Browse CVEs

MEDIUM 5.7 CVE-2026-48210 An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default … Otrs Mitigation only Fix from $1,6002026-05-31 HIGH 8.8 CVE-2017-14635 In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistic… Otrs Mitigation only Fix from $1,9502017-09-21 MEDIUM 6.1 CVE-2017-9299 Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as demonstrated by OrderBy=[XSS] and Direction=[XSS] attacks.… Otrs No fix yet Fix from $1,6002017-05-29 MEDIUM 6.1 CVE-2016-9139 Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allow… Otrs Mitigation only Fix from $1,6002017-02-17 MEDIUM 6.0 CVE-2014-9324 The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access a… Otrs Help Desk Mitigation only Fix from $1,6002014-12-19 MEDIUM 5.0 CVE-2010-3476 Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against… Otrs Mitigation only Fix from $1,6002010-09-20 MEDIUM 6.5 CVE-2010-0438 Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x before … Otrs Mitigation only Fix from $1,6002010-02-09