498 matches found
CLEANSTART-2024-CY35414 issue was discovered in Open Ticket Request System (OTRS) 5
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 5...
CLEANSTART-2024-RN14756 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-TT49662 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-WF89889 issue was discovered in Open Ticket Request System (OTRS) 7
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 7...
CLEANSTART-2024-WT50131 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
CLEANSTART-2024-BZ08127 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
CLEANSTART-2024-AZ22195 issue was discovered in Open Ticket Request System (OTRS) 6
Security vulnerability affects the otrs package. An issue was discovered in Open Ticket Request System OTRS 6...
CLEANSTART-2024-ZP87084 Open Ticket Request System (OTRS) 4
Security vulnerability affects the otrs package. Open Ticket Request System OTRS 4...
Astra Linux – Vulnerability in Samba, Heimdal
A null pointer de-reference was detected in the way the Samba Kerberos server handled the absence of the sname in the TGS-REQ Ticket Granting Server – Request. A authenticated user could exploit this flaw to crash the Samba server...
CVE-2026-48188
An improper Input Validation vulnerability in OTRS or OTRS Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is configured with the NOBACKSLASHESCAPES SQL mode...
CVE-2026-48189
An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to other groups. Please note that the feature has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: 7.0.X 8.0.X 2023.X...
EUVD-2025-208946
A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...
CVE-2008-7277
Open Ticket Request System OTRS before 2.3.0-beta4 checks for the rw permission, instead of the configured merge permission, during authorization of merge operations, which might allow remote authenticated users to bypass intended access restrictions by merging two tickets...
CVE-2008-7283
Open Ticket Request System OTRS before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-interface updates to tickets by leveraging queue read permissions...
CVE-2019-18179
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, even tickets in a queue where the attacker doesn'...
CVE-2019-16375
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.11, and Community Edition 5.0.x through 5.0.37 and 6.0.x through 6.0.22. An attacker who is logged in as an agent or customer user with appropriate permissions can create a carefully crafted string containing malicious...
CVE-2019-12497
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. In the customer or external frontend, personal information of agents e.g., Name and mail address can be disclosed in external notes...
EUVD-2010-4726
Malware in sbrugna...