Skip to content
OpenAdvisories
Unscored DLA-1119-1 4 CVEs

otrs2 - security update

Published Sep 30, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 otrs2 3.3.18-1~deb7u1

Vulnerabilities 4

  • Unscored —
    CVE-2014-1695 Public exploit

    Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15,…

    otrs2 Debian
  • Unscored —
    CVE-2014-2553

    Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.21, 3.2.x before 3.2.16,…

    otrs2 Debian
  • Unscored —
    CVE-2014-2554

    OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking a…

    otrs2 Debian
  • Unscored —
    CVE-2017-14635

    In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticate…

    otrs2 otrs2 Debian Ubuntu