Approved changes feed: RSS · Atom
cpe:2.3:a:otrs_ag:otrs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Otrs Ag (9a52b612-284c-5871-a0c1-b1fbdb0057b3) |
|---|---|
| Product | Otrs (c2434164-f0fd-5127-8c15-cc2d8653a658) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6060 |
vulnerable | 2026-06-08 08:07:04.436401 |
Possible DoS via SQL Box
MEDIUM (4.5)
A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS:
* 7.0.X
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.3.X
Published: 2026-04-20T18:20:01.664Z
Updated: 2026-04-20T18:48:48.185Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48210 |
vulnerable | 2026-06-08 08:05:12.267831 |
Possible information disclosure via External Interface
MEDIUM (5.7)
An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend
This issue affects OTRS 2026.3.1
Published: 2026-05-31T21:11:25.337Z
Updated: 2026-06-01T13:24:39.472Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48209 |
vulnerable | 2026-06-08 08:05:12.267527 |
Reflected XSS in authenticated agent context
HIGH (7.1)
An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers to perform reflected cross-site scripting (XSS) attacks via crafted request parameters associated with ticket actions. By injecting malicious JavaScript into manipulated request URLs, attackers can execute arbitrary script code in the context of an authenticated agent session when the crafted link is opened.
This issue affects OTRS:
* 7.0.x
Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected
Published: 2026-06-01T03:32:28.473Z
Updated: 2026-06-01T13:19:45.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48208 |
vulnerable | 2026-06-08 08:05:12.267161 |
Denial-of-Service via SVG Rendering in Ticket
MEDIUM (6.5)
An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when affected tickets are opened by an agent or customer. The issue can be exploited without JavaScript execution and is not mitigated by the configured Content Security Policy (CSP).
This issue affects OTRS:
* 7.0.X
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.4.X
Please note that ((OTRS)) Community Edition 6.x and before are vulnerable. Products based on the ((OTRS)) Community Edition also very likely to be affected
Published: 2026-06-01T03:32:38.926Z
Updated: 2026-06-01T13:19:22.939Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48191 |
under_investigation | 2026-06-08 08:05:12.265038 |
Wrong Permission Handling in Document Search Article Meta Filters
LOW (3.5)
An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge about number of affected CIs, SLA and services without gaining access to them.
This issue affects OTRS with STORM modules:
* 7.0.X
* 8.0.X
* 2023.X
* 2024.X
* 2025.X
* 2026.X before 2026.4.X
Published: 2026-06-01T03:32:47.624Z
Updated: 2026-06-01T13:18:59.494Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48190 |
vulnerable | 2026-06-08 08:05:12.264778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48189 |
vulnerable | 2026-06-08 08:05:12.264609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48188 |
vulnerable | 2026-06-08 08:05:12.264227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48187 |
under_investigation | 2026-06-08 08:05:12.263043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24391 |
vulnerable | 2026-06-08 07:12:48.554937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24390 |
vulnerable | 2026-06-08 07:12:48.554567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24389 |
vulnerable | 2026-06-08 07:12:48.554078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24388 |
vulnerable | 2026-06-08 07:12:48.552663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24387 |
vulnerable | 2026-06-08 07:12:48.551388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6540 |
vulnerable | 2026-06-08 06:58:19.733881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43446 |
vulnerable | 2026-06-08 06:45:51.340832 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43445 |
vulnerable | 2026-06-08 06:45:51.340373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43444 |
vulnerable | 2026-06-08 06:45:51.339967 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43443 |
vulnerable | 2026-06-08 06:45:51.337332 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43442 |
vulnerable | 2026-06-08 06:45:51.335993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23794 |
vulnerable | 2026-06-08 06:29:40.455919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23793 |
vulnerable | 2026-06-08 06:29:40.454022 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23792 |
vulnerable | 2026-06-08 06:29:40.451160 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23791 |
vulnerable | 2026-06-08 06:29:40.450438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23790 |
vulnerable | 2026-06-08 06:29:40.448616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6254 |
vulnerable | 2026-06-08 06:19:46.786418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5422 |
vulnerable | 2026-06-08 06:19:43.569755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5421 |
vulnerable | 2026-06-08 06:19:43.566435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38060 |
vulnerable | 2026-06-08 06:08:16.834704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38059 |
vulnerable | 2026-06-08 06:08:16.834023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38058 |
vulnerable | 2026-06-08 06:08:16.832669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38057 |
vulnerable | 2026-06-08 06:08:16.830311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38056 |
vulnerable | 2026-06-08 06:08:16.827090 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2534 |
vulnerable | 2026-06-08 06:02:42.488527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1250 |
vulnerable | 2026-06-08 05:52:34.180668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1248 |
vulnerable | 2026-06-08 05:52:34.177489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4427 |
vulnerable | 2026-06-08 05:51:37.439080 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39052 |
vulnerable | 2026-06-08 05:47:17.812682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39051 |
vulnerable | 2026-06-08 05:47:17.811936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39050 |
vulnerable | 2026-06-08 05:47:17.811362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39049 |
vulnerable | 2026-06-08 05:47:17.808531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32741 |
vulnerable | 2026-06-08 05:44:45.728321 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32740 |
vulnerable | 2026-06-08 05:44:45.727847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32739 |
vulnerable | 2026-06-08 05:44:45.724246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1004 |
vulnerable | 2026-06-08 05:39:11.645380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0475 |
vulnerable | 2026-06-08 05:39:10.107819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0473 |
vulnerable | 2026-06-08 05:39:10.105012 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36100 |
vulnerable | 2026-06-08 05:32:49.750198 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36097 |
vulnerable | 2026-06-08 05:32:49.749622 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36096 |
vulnerable | 2026-06-08 05:32:49.749011 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36095 |
vulnerable | 2026-06-08 05:32:49.748408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36094 |
vulnerable | 2026-06-08 05:32:49.747761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36093 |
vulnerable | 2026-06-08 05:32:49.745657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36092 |
vulnerable | 2026-06-08 05:32:49.745131 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36091 |
vulnerable | 2026-06-08 05:32:49.742847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21443 |
vulnerable | 2026-06-08 05:29:12.030673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21441 |
vulnerable | 2026-06-08 05:29:12.027497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21440 |
vulnerable | 2026-06-08 05:29:12.027099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21439 |
vulnerable | 2026-06-08 05:29:12.026625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21438 |
vulnerable | 2026-06-08 05:29:12.024221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21435 |
vulnerable | 2026-06-08 05:29:12.017334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1778 |
vulnerable | 2026-06-08 05:21:03.017595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1777 |
vulnerable | 2026-06-08 05:21:03.017258 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1776 |
vulnerable | 2026-06-08 05:21:03.016904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1775 |
vulnerable | 2026-06-08 05:21:03.016527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1774 |
vulnerable | 2026-06-08 05:21:03.016001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1773 |
vulnerable | 2026-06-08 05:21:03.015585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1772 |
vulnerable | 2026-06-08 05:21:03.015042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1771 |
vulnerable | 2026-06-08 05:21:03.014528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1770 |
vulnerable | 2026-06-08 05:21:03.013780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1769 |
vulnerable | 2026-06-08 05:21:03.012939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1768 |
vulnerable | 2026-06-08 05:21:03.012352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1767 |
vulnerable | 2026-06-08 05:21:03.011848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1766 |
vulnerable | 2026-06-08 05:21:03.011369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1765 |
vulnerable | 2026-06-08 05:21:03.006727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.