497 matches found
CLEANSTART-2024-CY35414 issue was discovered in Open Ticket Request System (OTRS) 5
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 5...
CLEANSTART-2024-RN14756 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-TT49662 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-WF89889 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-WT50131 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
CLEANSTART-2024-BZ08127 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
CLEANSTART-2024-AZ22195 issue was discovered in Open Ticket Request System (OTRS) 6
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 6...
CLEANSTART-2024-ZP87084 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
CVE-2026-48188
An improper Input Validation vulnerability in OTRS or OTRS Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is configured with the NOBACKSLASHESCAPES SQL mode...
EUVD-2025-208946
A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...
CVE-2008-7277
Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...
CVE-2008-7283
Open Ticket Request System OTRS before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-interface updates to tickets by leveraging queue read permissions...
CVE-2019-18179
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, even tickets in a queue where the attacker doesn'...
CVE-2019-16375
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious...
CVE-2019-12497
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. In the customer or external frontend, personal information of agents e.g., Name and mail address can be disclosed in external notes...
PT-2026-6485
The SignalK access request system has two related features that when combined by themselves and with the infromation disclosure vulnerability enable convincing social engineering attacks against administrators. When a device creates an access request, it specifies three fields: clientId,...
CVE-2025-69203
Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the access request system have two related features that when combined by themselves and with an information disclosure vulnerability enable convincing social engineering attacks against...
CVE-2025-69203: Authentication Bypass by Spoofing
Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the access request system have two related features that when combined by themselves and with an information disclosure vulnerability enable convincing social engineering attacks against...