Browse CVEs

CRITICAL 9.4 CVE-2016-5843 Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System (OTR… Faq Patch available Fix from $2,3002016-09-17 MEDIUM 6.0 CVE-2014-9324 The GenericInterface in OTRS Help Desk 3.2.x before 3.2.17, 3.3.x before 3.3.11, and 4.0.x before 4.0.3 allows remote authenticated users to access a… Otrs Help Desk Mitigation only Fix from $1,6002014-12-19 HIGH 7.5 CVE-2014-1471 SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, … Otrs Patch available Fix from $1,9502014-02-04 MEDIUM 6.8 CVE-2014-1694 Multiple cross-site request forgery (CSRF) vulnerabilities in (1) CustomerPreferences.pm, (2) CustomerTicketMessage.pm, (3) CustomerTicketProcess.pm,… Otrs Patch available Fix from $1,6002014-02-04 MEDIUM 6.5 CVE-2011-2385 The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneH… Iphonehandle Patch available Fix from $1,6002011-07-19 MEDIUM 6.5 CVE-2008-7277 Open Ticket Request System (OTRS) before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization o… Otrs after 2.3.0 Fix from $1,6002011-03-18 MEDIUM 6.5 CVE-2008-7279 The CustomerInterface component in Open Ticket Request System (OTRS) before 2.2.8 allows remote authenticated users to bypass intended access restric… Otrs after 2.2.7 Fix from $1,6002011-03-18 MEDIUM 6.5 CVE-2010-4763 The ACL-customer-status Ticket Type setting in Open Ticket Request System (OTRS) before 3.0.0-beta1 does not restrict the ticket options after an AJA… Otrs after 2.4.10 Fix from $1,6002011-03-18 MEDIUM 6.0 CVE-2008-7283 Open Ticket Request System (OTRS) before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access r… Otrs after 2.2.5 Fix from $1,6002011-03-18 MEDIUM 6.0 CVE-2010-4768 Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intend… Otrs after 2.3.4 Fix from $1,6002011-03-18 MEDIUM 5.0 CVE-2008-7278 The S/MIME feature in Open Ticket Request System (OTRS) before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environm… Otrs after 2.2.4 Fix from $1,6002011-03-18 MEDIUM 5.0 CVE-2008-7280 Kernel/System/EmailParser.pm in PostmasterPOP3.pl in Open Ticket Request System (OTRS) before 2.2.7 does not properly handle e-mail messages containi… Otrs after 2.2.6 Fix from $1,6002011-03-18 MEDIUM 5.0 CVE-2009-5057 The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environment variables for OpenSSL, whic… Otrs after 2.3.3 Fix from $1,6002011-03-18 MEDIUM 5.0 CVE-2010-4764 Open Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypted e-mail messages that were b… Otrs after 2.4.9 Fix from $1,6002011-03-18 MEDIUM 5.0 CVE-2010-4767 Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated w… Otrs after 2.3.5 Fix from $1,6002011-03-18 MEDIUM 5.0 CVE-2011-1433 The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the se… Otrs after 3.0.5 Fix from $1,6002011-03-18 HIGH 7.5 CVE-2011-0456 webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, re… Otrs after 2.3.4 Fix from $1,9502011-03-11 MEDIUM 5.0 CVE-2010-3476 Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against… Otrs Mitigation only Fix from $1,6002010-09-20 MEDIUM 6.5 CVE-2010-0438 Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x before … Otrs Mitigation only Fix from $1,6002010-02-09 MEDIUM 6.4 CVE-2008-1515 The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify objects" via SOAP requests, related … Otrs 2.1.8 / 2.2.6+ Fix from $1,6002008-04-01 HIGH 7.5 CVE-2005-3893EPSS 7% Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote atta… Otrs Patch available Fix from $1,9502005-11-29 MEDIUM 5.8 CVE-2005-3895 Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail… Otrs Patch available Fix from $1,6002005-11-29