Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
otrs itsm vulnerabilities and exploits
(subscribe to this query)
801
VMScore
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command.
Otrs Otrs Itsm
Otrs Otrs Storm
Otrs Otrs
312
VMScore
CVE-2013-4718
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x prior to 3.0.9, 3.1.x prior to 3.1.10, and 3.2.x prior to 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML via an ITSM ConfigItem search.
Otrs Otrs
Otrs Otrs Itsm
578
VMScore
CVE-2013-4717
Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x prior to 3.0.22, 3.1.x prior to 3.1.18, and 3.2.x prior to 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/Pr...
Otrs Otrs
Otrs Otrs Itsm
356
VMScore
CVE-2013-3551
Kernel/Modules/AgentTicketPhone.pm in Open Ticket Request System (OTRS) 3.0.x prior to 3.0.20, 3.1.x prior to 3.1.16, and 3.2.x prior to 3.2.7, and OTRS ITSM 3.0.x prior to 3.0.8, 3.1.x prior to 3.1.9, and 3.2.x prior to 3.2.5 does not properly restrict tickets, which allows remo...
Otrs Otrs
Otrs Otrs Itsm
435
VMScore
CVE-2013-2637
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM before 3.2.4, 3.1.8, and 3.0.7 and FAQ before 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code.
Otrs Faq
Otrs Otrs Itsm
Opensuse Opensuse 12.2
Opensuse Opensuse 12.3
1 EDB exploit
570
VMScore
CVE-2013-2625
An Access Bypass issue exists in OTRS Help Desk prior to 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM prior to 3.2.3, 3.1.8, and 3.0.7, and FAQ prior to 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking mechanism is not verified
Otrs Faq
Otrs Otrs Help Desk
Otrs Otrs Itsm
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Opensuse Opensuse 12.2
Opensuse Opensuse 12.3
356
VMScore
CVE-2019-9753
An issue exists in Open Ticket Request System (OTRS) 7.x prior to 7.0.5. An attacker who is logged into OTRS as an agent or a customer user can use the search result screens to disclose information from invalid system entities. Following is the list of affected entities: Custom P...
Otrs Otrs
270
VMScore
CVE-2012-4600
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x prior to 2.4.14, 3.0.x prior to 3.0.16, and 3.1.x prior to 3.1.10, when Firefox or Opera is used, allows remote malicious users to inject arbitrary web script or HTML via an e-mail messa...
Otrs Otrs 2.4.0
Otrs Otrs 2.4.1
Otrs Otrs 2.4.10
Otrs Otrs 2.4.5
Otrs Otrs 2.4.13
Otrs Otrs 2.4.12
Otrs Otrs 2.4.6
Otrs Otrs 2.4.9
Otrs Otrs 2.4.3
Otrs Otrs 2.4.11
Otrs Otrs 2.4.4
Otrs Otrs 2.4.2
Otrs Otrs 2.4.8
Otrs Otrs 2.4.7
Otrs Otrs 3.0.12
Otrs Otrs Itsm 3.0.4
Otrs Otrs Itsm 3.0.2
Otrs Otrs 3.0.10
Otrs Otrs 3.0.2
Otrs Otrs 3.0.15
Otrs Otrs Itsm 3.0.5
Otrs Otrs 3.0.0
2 EDB exploits
435
VMScore
CVE-2012-2582
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x prior to 2.4.13, 3.0.x prior to 3.0.15, and 3.1.x prior to 3.1.9, and OTRS ITSM 2.1.x prior to 2.1.5, 3.0.x prior to 3.0.6, and 3.1.x prior to 3.1.6, allow remote malicious us...
Otrs Otrs 2.4.0
Otrs Otrs 2.4.9
Otrs Otrs 2.4.4
Otrs Otrs 2.4.3
Otrs Otrs 2.4.2
Otrs Otrs 2.4.10
Otrs Otrs 2.4.6
Otrs Otrs 2.4.5
Otrs Otrs 2.4.11
Otrs Otrs 2.4.1
Otrs Otrs 2.4.8
Otrs Otrs 2.4.7
Otrs Otrs 2.4.12
Otrs Otrs 3.0.0
Otrs Otrs 3.0.3
Otrs Otrs 3.0.2
Otrs Otrs 3.0.11
Otrs Otrs 3.0.12
Otrs Otrs 3.0.4
Otrs Otrs 3.0.7
Otrs Otrs 3.0.6
Otrs Otrs 3.0.10
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028
memory leak
log injection
CVE-2024-3400
CVE-2022-48695
CVE-2022-48675
CVE-2024-34487
CVE-2024-33792
spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started