Approved changes feed: RSS · Atom

cpe:2.3:a:otrs:otrs:2.4.0:beta1:*:*:*:*:*:*

part: a version: 2.4.0 update: beta1

VendorOtrs (265741d9-907d-5d62-a717-73ae1ea6326f)
ProductOtrs (a4c8163c-3d72-56f2-bdc3-a93fd57d712f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/otrs purl2cpe 2026-06-01 10:13:47.818015
pkg:deb/ubuntu/otrs purl2cpe 2026-06-01 10:13:47.818016
pkg:github/otrs/otrs purl2cpe 2026-06-01 10:13:47.818018
pkg:rpm/fedora/otrs purl2cpe 2026-06-01 10:13:47.818019
pkg:rpm/opensuse/otrs purl2cpe 2026-06-01 10:13:47.818021

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4751 vulnerable 2026-06-08 05:02:52.561483 Details available
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC attribute of an element, as demonstrated by an IFRAME element.
Published: 2012-10-22T16:00:00.000Z
Updated: 2024-08-06T20:42:55.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4600 vulnerable 2026-06-08 05:02:51.614790 Details available
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags.
Published: 2012-08-31T14:00:00.000Z
Updated: 2024-08-06T20:42:54.794Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2582 vulnerable 2026-06-08 05:02:04.891082 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.
Published: 2012-08-23T10:00:00.000Z
Updated: 2024-08-06T19:34:25.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2746 vulnerable 2026-06-08 04:58:08.996463 Details available
Unspecified vulnerability in Kernel/Modules/AdminPackageManager.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.x before 2.4.11 and 3.x before 3.0.10 allows remote authenticated administrators to read arbitrary files via unknown vectors.
Published: 2011-08-29T15:00:00.000Z
Updated: 2024-08-06T23:08:24.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1518 vulnerable 2026-06-08 04:58:00.031451 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-04-18T18:00:00.000Z
Updated: 2024-08-06T22:28:41.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1433 vulnerable 2026-06-08 04:57:59.293824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4766 vulnerable 2026-06-08 04:56:30.807623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4765 vulnerable 2026-06-08 04:56:30.805362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4764 vulnerable 2026-06-08 04:56:30.802965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4763 vulnerable 2026-06-08 04:56:30.779038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4762 vulnerable 2026-06-08 04:56:30.776449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4761 vulnerable 2026-06-08 04:56:30.757778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4760 vulnerable 2026-06-08 04:56:30.744711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4759 vulnerable 2026-06-08 04:56:30.731065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4758 vulnerable 2026-06-08 04:56:30.713515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5055 vulnerable 2026-06-08 04:51:51.842805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.