Approved changes feed: RSS · Atom

cpe:2.3:a:otrs:otrs:1.2.0:beta1:*:*:*:*:*:*

part: a version: 1.2.0 update: beta1

VendorOtrs (265741d9-907d-5d62-a717-73ae1ea6326f)
ProductOtrs (a4c8163c-3d72-56f2-bdc3-a93fd57d712f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/otrs purl2cpe 2026-06-01 10:13:47.817555
pkg:deb/ubuntu/otrs purl2cpe 2026-06-01 10:13:47.817557
pkg:github/otrs/otrs purl2cpe 2026-06-01 10:13:47.817558
pkg:rpm/fedora/otrs purl2cpe 2026-06-01 10:13:47.817560
pkg:rpm/opensuse/otrs purl2cpe 2026-06-01 10:13:47.817561

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1433 vulnerable 2026-06-08 04:57:59.254340 Details available
The (1) AgentInterface and (2) CustomerInterface components in Open Ticket Request System (OTRS) before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the _UserLogin and _UserPW fields.
Published: 2011-03-18T16:00:00.000Z
Updated: 2024-08-06T22:28:41.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4768 vulnerable 2026-06-08 04:56:30.810913 Details available
Open Ticket Request System (OTRS) before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remove operations involving both hidden permissions and other permissions.
Published: 2011-03-18T16:00:00.000Z
Updated: 2024-09-16T23:11:25.717Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4767 vulnerable 2026-06-08 04:56:30.808796 Details available
Open Ticket Request System (OTRS) before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service (duplicate tickets and duplicate auto-responses) by sending a crafted message to a POP3 mailbox.
Published: 2011-03-18T16:00:00.000Z
Updated: 2024-09-17T02:36:10.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4766 vulnerable 2026-06-08 04:56:30.806607 Details available
The AgentTicketForward feature in Open Ticket Request System (OTRS) before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a standard e-mail client.
Published: 2011-03-18T16:00:00.000Z
Updated: 2024-09-16T23:27:10.009Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4765 vulnerable 2026-06-08 04:56:30.804348 Details available
Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System (OTRS) before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets.
Published: 2011-03-18T16:00:00.000Z
Updated: 2024-09-17T02:15:58.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4764 vulnerable 2026-06-08 04:56:30.801993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4763 vulnerable 2026-06-08 04:56:30.778002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4762 vulnerable 2026-06-08 04:56:30.775448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4761 vulnerable 2026-06-08 04:56:30.756662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4760 vulnerable 2026-06-08 04:56:30.743717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4759 vulnerable 2026-06-08 04:56:30.729929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4758 vulnerable 2026-06-08 04:56:30.677056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5057 vulnerable 2026-06-08 04:51:51.851062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5056 vulnerable 2026-06-08 04:51:51.848921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-5055 vulnerable 2026-06-08 04:51:51.812278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7283 vulnerable 2026-06-08 04:51:06.579513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7282 vulnerable 2026-06-08 04:51:06.577815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7281 vulnerable 2026-06-08 04:51:06.576075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7280 vulnerable 2026-06-08 04:51:06.574312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7279 vulnerable 2026-06-08 04:51:06.572552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7278 vulnerable 2026-06-08 04:51:06.570899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7277 vulnerable 2026-06-08 04:51:06.568988 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7276 vulnerable 2026-06-08 04:51:06.559003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-7275 vulnerable 2026-06-08 04:51:06.530073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.