UBUNTU-CVE-2021-21443

Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG OTRS Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27...

Code injection

Agents are able to list appointments in the calendars without required permissions. This issue affects: OTRS AG OTRS Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27...

UBUNTU-CVE-2021-36092

It's possible to create an email which contains specially crafted link and it can be used to perform XSS attack. This issue affects: OTRS AG OTRS Community Edition:6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior version...

CVE-2021-36092

Removed by vendor...

CVE-2021-36091 Unautorized access to the calendar appointments

Agents are able to list appointments in the calendars without required permissions. This issue affects: OTRS AG OTRS Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27...

CVE-2021-21443

Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG OTRS Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27...

CVE-2021-21443

CVE-2021-21443 affects OTRS: Community Edition 6.0.x (6.0.1+ on release track) and OTRS: 7.0.x prior to 7.0.27. The issue allows agents to list customer user emails without required permissions in the bulk action screen, indicating an access control exposure. The connected sources confirm the aff...

CVE-2021-21440

CVE-2021-21440 affects OTRS:Generated Support Bundles may contain private S/MIME and PGP keys when the parent folder is not hidden, with secrets and PIN not masked. Affected: OTRS Community Edition 6.0.x (6.0.1+), OTRS 7.0.x (up to 7.0.27), OTRS 8.0.x (up to 8.0.14). Root cause: support bundles m...

CVE-2021-21440

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions...

CVE-2021-21440 Support Bundle includes S/Mime and PGP keys

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG OTRS Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions...

PT-2021-21112 · Otrs Ag +1 · Otrs +2

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions prior to 7.0.28 OTRS AG OTRS versions prior to 8.0.15 Description: It is possible to create an email that contains a specially crafted link, which can be used to...

PT-2021-21111 · Otrs Ag +1 · Otrs +2

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions prior to 7.0.27 Description: The issue allows agents to list appointments in calendars without the necessary permissions. Recommendations: For OTRS AG OTRS Communit...

PT-2021-6760 · Otrs Ag · Otrs +1

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions 7.0.27 and prior OTRS AG OTRS versions 8.0.14 and prior Description: The issue is related to the disclosure of information in the OTRS ticket system. It allows a...

OTRS 信息泄露漏洞

OTRS is an application from the German company OTRS. A service management software. An information disclosure vulnerability exists in OTRS AG OTRS Community Edition, which stems from an agent being able to list customer user emails in a bulk action screen without requiring privileges...

CVE-2021-2421

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Integration and Interfaces. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2021-2421

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Integration and Interfaces. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Vulnerabilities fixed in Oracle Peoplesoft products

Oracle has fixed vulnerabilities in PeopleSoft Enterprise HCM Candidate Gateway, PeopleSoft Enterprise PT PeopleTools, PeopleSoft Enterprise CS Campus Community and PeopleSoft Enterprise HCM Shared Components. The vulnerabilities potentially enable a malicious party to able to perform attacks tha...

CVE-2021-2421

CVE-2021-2421 affects Oracle PeopleSoft Enterprise CS Campus Community (component: Integration and Interfaces). Affected versions are 9.0 and 9.2. The vulnerability is exploitable by a low-privileged attacker over HTTP with network access, potentially leading to unauthorized access to confidentia...

CVE-2021-2421

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Integration and Interfaces. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2021-2421

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Integration and Interfaces. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...