Skip to content
OpenAdvisories
Unscored DLA-1212-1 4 CVEs

otrs2 - security update

Published Dec 19, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 otrs2 3.3.18-1~deb7u2

Vulnerabilities 4

  • Unscored —

    In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to g…

  • Unscored —

    Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.2…

  • Unscored —

    In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attack…

  • Unscored —
    CVE-2017-16921 Public exploit EPSS 20%

    In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.…