Open Ticket Request System (OTRS) 2.2.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:otrs:otrs:2.2.7:*:*:*:*:*:*:*

part: a version: 2.2.7 update: *

VendorOtrs (265741d9-907d-5d62-a717-73ae1ea6326f)
ProductOtrs (a4c8163c-3d72-56f2-bdc3-a93fd57d712f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/otrs purl2cpe 2026-06-01 10:13:47.817915
pkg:deb/ubuntu/otrs purl2cpe 2026-06-01 10:13:47.817916
pkg:github/otrs/otrs purl2cpe 2026-06-01 10:13:47.817917
pkg:rpm/fedora/otrs purl2cpe 2026-06-01 10:13:47.817919
pkg:rpm/opensuse/otrs purl2cpe 2026-06-01 10:13:47.817920

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-2746 vulnerable 2026-06-08 04:58:08.996229 Details available
Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors.
Published: 2011-08-29T15:00:00.000Z
Updated: 2024-08-06T23:08:24.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1433 vulnerable 2026-06-08 04:57:59.284854 Details available
The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the _UserLogin and _UserPW fields.
Published: 2011-03-18T16:00:00.000Z
Updated: 2024-08-06T22:28:41.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0456 vulnerable 2026-06-08 04:56:37.373382 Details available
webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
Published: 2011-03-11T17:00:00.000Z
Updated: 2024-08-06T21:51:08.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4768 vulnerable 2026-06-08 04:56:30.811706 Details available
Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remove operations involving both hidden permissions and other permissions.
Published: 2011-03-18T16:00:00.000Z
Updated: 2024-09-16T23:11:25.717Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4767 vulnerable 2026-06-08 04:56:30.809735 Details available
Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service (duplicate tickets and duplicate auto-responses) by sending a crafted message to a POP3 mailbox.
Published: 2011-03-18T16:00:00.000Z
Updated: 2024-09-17T02:36:10.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4766 vulnerable 2026-06-08 04:56:30.807405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4765 vulnerable 2026-06-08 04:56:30.805081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4764 vulnerable 2026-06-08 04:56:30.802741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4763 vulnerable 2026-06-08 04:56:30.778754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4762 vulnerable 2026-06-08 04:56:30.776217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4761 vulnerable 2026-06-08 04:56:30.757554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4760 vulnerable 2026-06-08 04:56:30.744487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4759 vulnerable 2026-06-08 04:56:30.730839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4758 vulnerable 2026-06-08 04:56:30.704843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0438 vulnerable 2026-06-08 04:52:02.629006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5057 vulnerable 2026-06-08 04:51:51.851881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5056 vulnerable 2026-06-08 04:51:51.849777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5055 vulnerable 2026-06-08 04:51:51.835800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7277 vulnerable 2026-06-08 04:51:06.569756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7276 vulnerable 2026-06-08 04:51:06.559790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7275 vulnerable 2026-06-08 04:51:06.553863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.