otrs2

93 results · Feed

• Unscored —
  CVE-2010-4759

  Open Ticket Request System (OTRS) before 3.0.0-beta7 does not properly restrict the ticket ages that are within the sco…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4764

  Open Ticket Request System (OTRS) before 2.4.10, and 3.x before 3.0.3, does not present warnings about incoming encrypt…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2010-4760

  Open Ticket Request System (OTRS) before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing …

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2009-5056

  Open Ticket Request System (OTRS) before 2.4.0-beta2 does not properly enforce the move_into permission setting for a q…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2009-5055

  Open Ticket Request System (OTRS) before 2.4.4 grants ticket access on the basis of single-digit substrings of the Cust…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2009-5057

  The S/MIME feature in Open Ticket Request System (OTRS) before 2.3.4 does not configure the RANDFILE and HOME environme…

  otrs2 Debian
  Mar 18, 2011
• Unscored —
  CVE-2011-0456

  webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary comman…

  otrs2 Debian
  Mar 11, 2011
• Unscored —
  CVE-2010-4071

  Cross-site scripting (XSS) vulnerability in AgentTicketZoom in OTRS 2.4.x before 2.4.9, when RichText is enabled, allow…

  otrs2 Debian
  Jan 20, 2011
• Unscored —
  CVE-2010-3476

  Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Pe…

  otrs2 Debian
  Sep 20, 2010
• Unscored —
  CVE-2010-2080

  Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x b…

  otrs2 Debian
  Sep 20, 2010
• Unscored —
  CVE-2010-0438

  Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1…

  otrs2 Debian
  Feb 9, 2010
• Unscored —
  CVE-2008-1515

  The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to "read and modify object…

  otrs2 Debian
  Apr 1, 2008
• Unscored —
  CVE-2007-2524 Public exploit

  Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers…

  otrs2 Debian
  May 8, 2007