EUVD-2012-4676

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cross-site scripting vulnerability in OTRS allows remote script injection via manipulated email content

Reporter	Title	Published	Views	Family All 23
FreeBSD	otrs -- XSS vulnerability	16 Oct 201200:00	–	freebsd
FreeBSD	otrs -- XSS vulnerability could lead to remote code execution	16 Oct 201200:00	–	freebsd
Circl	CVE-2012-4751	18 Oct 201200:00	–	circl
CVE	CVE-2012-4751	22 Oct 201216:00	–	cve
Cvelist	CVE-2012-4751	22 Oct 201216:00	–	cvelist
Debian	[SECURITY] [DSA 2733-1] otrs2 security update	2 Aug 201320:25	–	debian
Debian	[SECURITY] [DSA 2733-1] otrs2 security update	2 Aug 201320:25	–	debian
Debian CVE	CVE-2012-4751	22 Oct 201216:00	–	debiancve
Tenable Nessus	Debian DSA-2733-1 : otrs2 - SQL injection	5 Aug 201300:00	–	nessus
Tenable Nessus	FreeBSD : otrs -- XSS vulnerability (13320091-52a6-11e2-a289-1c4bd681f0cf)	2 Jan 201300:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "f715cb40-d559-389b-93c8-0fa7f401951d",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "c667641a-3972-3168-b28b-361d3c9f592e",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2012-4751.html
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2012-4751
lists	www.lists.opensuse.org/opensuse-updates/2013-01/msg00036.html
securityfocus	www.securityfocus.com/bid/56093
znuny	www.znuny.com/assets/proof_of_concept_cve_2012-4751-znuny.py
otrs	www.otrs.com/en/open-source/community-news/security-advisories/security-advisory-2012-03/
znuny	www.znuny.com/en/
kb	www.kb.cert.org/vuls/id/603276
packetstormsecurity	www.packetstormsecurity.org/files/117504/OTRS-3.1-Cross-Site-Scripting.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2012-4751

07 Oct 2025 00:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.3

EPSS0.05551