Approved changes feed: RSS · Atom
cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Otrs (265741d9-907d-5d62-a717-73ae1ea6326f) |
|---|---|
| Product | Otrs (a4c8163c-3d72-56f2-bdc3-a93fd57d712f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/otrs |
purl2cpe | 2026-06-01 10:13:47.767376 |
pkg:deb/ubuntu/otrs |
purl2cpe | 2026-06-01 10:13:47.767378 |
pkg:github/otrs/otrs |
purl2cpe | 2026-06-01 10:13:47.767379 |
pkg:rpm/fedora/otrs |
purl2cpe | 2026-06-01 10:13:47.767381 |
pkg:rpm/opensuse/otrs |
purl2cpe | 2026-06-01 10:13:47.767382 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-24387 |
vulnerable | 2026-06-08 07:12:48.552279 |
Missing CSRF protection
MEDIUM (4.8)
A vulnerability in OTRS Application Server allows session hijacking due to missing attributes for sensitive
cookie settings in HTTPS sessions. A request to an OTRS endpoint from a possible malicious web site, would send the authentication cookie, performing an unwanted read operation.
This issue affects:
* OTRS 7.0.X
* OTRS 8.0.X
* OTRS 2023.X
* OTRS 2024.X
* OTRS 2025.x
Published: 2025-03-10T09:28:31.053Z
Updated: 2025-03-10T13:12:40.237Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6540 |
vulnerable | 2026-06-08 06:58:19.734844 |
Information exlosure in external interface
MEDIUM (5.7)
Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has been disabled by the administrator.
This issue affects OTRS: 8.0.X, 2023.X, from 2024.X through 2024.4.x
Published: 2024-07-15T07:13:49.918Z
Updated: 2024-08-01T21:41:03.955Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43444 |
vulnerable | 2026-06-08 06:45:51.339022 |
Passwords are written to Admin Log Module
HIGH (8.2)
Passwords of agents and customers are displayed in plain text in the OTRS admin log module if certain configurations regarding the authentication sources match and debugging for the authentication backend has been enabled.
This issue affects:
* OTRS from 7.0.X through 7.0.50
* OTRS 8.0.X
* OTRS 2023.X
* OTRS from 2024.X through 2024.5.X
* ((OTRS)) Community Edition: 6.0.x
Products based on the ((OTRS)) Community Edition also very likely to be affected
Published: 2024-08-26T08:42:58.796Z
Updated: 2024-08-29T07:36:13.555Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23794 |
vulnerable | 2026-06-08 06:29:40.456060 |
Agents are able to lock the ticket without the "Owner" permission
MEDIUM (5.2)
An incorrect privilege assignment vulnerability in the inline editing functionality of OTRS can lead to privilege escalation. This flaw allows an agent with read-only permissions to gain full access to a ticket. This issue arises in very rare instances when an admin has previously enabled the setting 'RequiredLock' of 'AgentFrontend::Ticket::InlineEditing::Property###Watch' in the system configuration.This issue affects OTRS:
* 8.0.X
* 2023.X
* from 2024.X through 2024.4.x
Published: 2024-07-15T07:14:09.557Z
Updated: 2024-08-01T23:13:07.432Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23793 |
vulnerable | 2026-06-08 06:29:40.451718 |
Upload of files outside application directory
MEDIUM (6.3)
The file upload feature in OTRS and ((OTRS)) Community Edition has a path traversal vulnerability. This issue permits authenticated agents or customer users to upload potentially harmful files to directories accessible by the web server, potentially leading to the execution of local code like Perl scripts.
This issue affects OTRS: from 7.0.X through 7.0.49, 8.0.X, 2023.X, from 2024.X through 2024.3.2; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.
Published: 2024-06-06T18:06:58.805Z
Updated: 2024-08-01T23:13:07.327Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23792 |
vulnerable | 2026-06-08 06:29:40.451206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23791 |
vulnerable | 2026-06-08 06:29:40.450595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23790 |
vulnerable | 2026-06-08 06:29:40.449809 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6254 |
vulnerable | 2026-06-08 06:19:46.786547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5422 |
vulnerable | 2026-06-08 06:19:43.571135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5421 |
vulnerable | 2026-06-08 06:19:43.569182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38059 |
vulnerable | 2026-06-08 06:08:16.834260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38058 |
vulnerable | 2026-06-08 06:08:16.833531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2534 |
vulnerable | 2026-06-08 06:02:42.489288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1250 |
vulnerable | 2026-06-08 05:52:34.181034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1248 |
vulnerable | 2026-06-08 05:52:34.179685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4427 |
vulnerable | 2026-06-08 05:51:37.441223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3501 |
vulnerable | 2026-06-08 05:48:21.296366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39052 |
vulnerable | 2026-06-08 05:47:17.812759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39051 |
vulnerable | 2026-06-08 05:47:17.812191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39050 |
vulnerable | 2026-06-08 05:47:17.811587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39049 |
vulnerable | 2026-06-08 05:47:17.810924 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32741 |
vulnerable | 2026-06-08 05:44:45.728357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32740 |
vulnerable | 2026-06-08 05:44:45.727890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32739 |
vulnerable | 2026-06-08 05:44:45.727417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1004 |
vulnerable | 2026-06-08 05:39:11.645418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0475 |
vulnerable | 2026-06-08 05:39:10.107864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0473 |
vulnerable | 2026-06-08 05:39:10.105744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36100 |
vulnerable | 2026-06-08 05:32:49.753925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36097 |
vulnerable | 2026-06-08 05:32:49.749748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36092 |
vulnerable | 2026-06-08 05:32:49.745265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36091 |
vulnerable | 2026-06-08 05:32:49.744455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21443 |
vulnerable | 2026-06-08 05:29:12.030716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21441 |
vulnerable | 2026-06-08 05:29:12.027646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21440 |
vulnerable | 2026-06-08 05:29:12.027139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21439 |
vulnerable | 2026-06-08 05:29:12.026672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21438 |
vulnerable | 2026-06-08 05:29:12.025139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21435 |
vulnerable | 2026-06-08 05:29:12.018668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1778 |
vulnerable | 2026-06-08 05:21:03.017625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1777 |
vulnerable | 2026-06-08 05:21:03.017291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1776 |
vulnerable | 2026-06-08 05:21:03.016945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1775 |
vulnerable | 2026-06-08 05:21:03.016557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1774 |
vulnerable | 2026-06-08 05:21:03.016045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1773 |
vulnerable | 2026-06-08 05:21:03.015626 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1772 |
vulnerable | 2026-06-08 05:21:03.015086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1771 |
vulnerable | 2026-06-08 05:21:03.014566 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1770 |
vulnerable | 2026-06-08 05:21:03.013822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1769 |
vulnerable | 2026-06-08 05:21:03.012985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1768 |
vulnerable | 2026-06-08 05:21:03.012380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1767 |
vulnerable | 2026-06-08 05:21:03.012009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1766 |
vulnerable | 2026-06-08 05:21:03.011420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1765 |
vulnerable | 2026-06-08 05:21:03.008306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9892 |
vulnerable | 2026-06-08 05:14:26.385871 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9753 |
vulnerable | 2026-06-08 05:14:26.200786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9752 |
vulnerable | 2026-06-08 05:14:26.198663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9751 |
vulnerable | 2026-06-08 05:14:26.197966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18180 |
vulnerable | 2026-06-08 05:13:10.966592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18179 |
vulnerable | 2026-06-08 05:13:10.963474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16375 |
vulnerable | 2026-06-08 05:13:08.387988 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13458 |
vulnerable | 2026-06-08 05:12:42.251934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13457 |
vulnerable | 2026-06-08 05:12:42.251507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12497 |
vulnerable | 2026-06-08 05:12:39.245779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10067 |
vulnerable | 2026-06-08 05:12:22.092240 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10066 |
vulnerable | 2026-06-08 05:12:22.091754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10065 |
vulnerable | 2026-06-08 05:12:22.091225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7567 |
vulnerable | 2026-06-08 05:12:03.884457 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17883 |
vulnerable | 2026-06-08 05:11:06.841169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-11563 |
vulnerable | 2026-06-08 05:10:38.669104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10198 |
vulnerable | 2026-06-08 05:10:26.437744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9324 |
vulnerable | 2026-06-08 05:10:09.692305 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17476 |
vulnerable | 2026-06-08 05:09:09.472098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16854 |
vulnerable | 2026-06-08 05:09:01.135418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16664 |
vulnerable | 2026-06-08 05:09:00.701234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15864 |
vulnerable | 2026-06-08 05:08:59.624452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4718 |
vulnerable | 2026-06-08 05:04:49.457332 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4717 |
vulnerable | 2026-06-08 05:04:49.456357 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4088 |
vulnerable | 2026-06-08 05:04:33.782574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3551 |
vulnerable | 2026-06-08 05:04:32.019369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2385 |
vulnerable | 2026-06-08 04:58:05.861381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1433 |
vulnerable | 2026-06-08 04:57:59.240283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0456 |
vulnerable | 2026-06-08 04:56:37.372956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4768 |
vulnerable | 2026-06-08 04:56:30.810547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4767 |
vulnerable | 2026-06-08 04:56:30.808419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4766 |
vulnerable | 2026-06-08 04:56:30.806246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4765 |
vulnerable | 2026-06-08 04:56:30.803977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4764 |
vulnerable | 2026-06-08 04:56:30.801617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4763 |
vulnerable | 2026-06-08 04:56:30.777485 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4758 |
vulnerable | 2026-06-08 04:56:30.664468 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5057 |
vulnerable | 2026-06-08 04:51:51.850682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-5055 |
vulnerable | 2026-06-08 04:51:51.800782 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7283 |
vulnerable | 2026-06-08 04:51:06.579145 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7282 |
vulnerable | 2026-06-08 04:51:06.577453 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7281 |
vulnerable | 2026-06-08 04:51:06.575699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7280 |
vulnerable | 2026-06-08 04:51:06.573945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7279 |
vulnerable | 2026-06-08 04:51:06.572182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7278 |
vulnerable | 2026-06-08 04:51:06.570471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7276 |
vulnerable | 2026-06-08 04:51:06.558600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7275 |
vulnerable | 2026-06-08 04:51:06.500735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1515 |
vulnerable | 2026-06-08 04:50:20.941452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.