Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2021-8715

Malicious code in bioql PyPI...

7.5CVSS5AI score0.01216EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-21441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Atta...

7.5CVSS6.1AI score0.01216EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/07/16 2:43 a.m.4 views

SUSE CVE-2024-6540

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has be...

5.7CVSS6.7AI score0.00385EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2024/07/15 8:15 a.m.18 views

CVE-2024-6540

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has be...

5.7CVSS5.9AI score0.00385EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/07/15 7:13 a.m.16 views

CVE-2024-6540 Information exlosure in external interface

Improper filtering of fields when using the export function in the ticket overview of the external interface in OTRS could allow an authorized user to download a list of tickets containing information about tickets of other customers. The problem only occurs if the TicketSearchLegacyEngine has be...

5.7CVSS6.8AI score0.00385EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:28 a.m.3 views

SUSE CVE-2018-10198

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets...

4.3CVSS4.4AI score0.00954EPSS
Exploits0References3
NVD
NVD
added 2021/06/16 10:15 a.m.12 views

CVE-2021-21441

There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTR...

7.5CVSS0.01216EPSS
Exploits0References2
OSV
OSV
added 2021/06/16 10:15 a.m.15 views

CVE-2021-21441

There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTR...

7.5CVSS5.7AI score
Exploits0References2
OSV
OSV
added 2021/06/16 10:15 a.m.1 views

DEBIAN-CVE-2021-21441

There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTR...

7.5CVSS5.3AI score0.01216EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/06/16 10:15 a.m.28 views

CVE-2021-21441

There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTR...

7.5CVSS6.3AI score0.01216EPSS
Exploits0References2
Prion
Prion
added 2021/06/16 10:15 a.m.13 views

Cross site scripting

There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTR...

4.3CVSS7.1AI score0.01216EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/06/16 10:15 a.m.1 views

UBUNTU-CVE-2021-21441

There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTR...

7.5CVSS6.1AI score0.01216EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2020/12/29 12:0 a.m.3 views

PT-2020-6430 · Otrs Ag · Otrs +1

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 through 6.0.x OTRS AG OTRS versions prior to 7.0.26 Description: The issue is related to a lack of protection of the web page structure in the ticket request system OTRS, allowing an attacker to...

9.8CVSS6.8AI score0.99019EPSS
Exploits18References75
CNVD
CNVD
added 2018/06/08 12:0 a.m.2 views

OTRS Information Disclosure Vulnerability

OTRS Open-source Ticket Request System is a set of open source defect tracking and management system software from OTRS Group in Germany. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and th...

4.3CVSS6.2AI score0.00954EPSS
Exploits0References1
OSV
OSV
added 2018/06/06 8:29 p.m.3 views

DEBIAN-CVE-2018-10198

An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets...

4.3CVSS6.6AI score0.00954EPSS
Exploits0References1
Rows per page
Query Builder