Approved changes feed: RSS · Atom

cpe:2.3:a:otrs:otrs:8.0.28:-:*:*:*:*:*:*

part: a version: 8.0.28 update: -

VendorOtrs (265741d9-907d-5d62-a717-73ae1ea6326f)
ProductOtrs (a4c8163c-3d72-56f2-bdc3-a93fd57d712f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/otrs purl2cpe 2026-06-01 10:13:47.820681
pkg:deb/ubuntu/otrs purl2cpe 2026-06-01 10:13:47.820682
pkg:github/otrs/otrs purl2cpe 2026-06-01 10:13:47.820684
pkg:rpm/fedora/otrs purl2cpe 2026-06-01 10:13:47.820685
pkg:rpm/opensuse/otrs purl2cpe 2026-06-01 10:13:47.820686

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4427 vulnerable 2026-06-03 14:48:35.690362 SQL Injection via OTRS Search API
MEDIUM (6.5)
Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7.0.1 before 7.0.40 Patch 1, from 8.0.1 before 8.0.28 Patch 1; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.
Published: 2022-12-19T08:09:51.646Z
Updated: 2025-04-14T18:03:54.260Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.