otrs2

5 results · Clear filters · Feed

• Critical 9.1
  CVE-2026-48188 Public exploit

  SQL Injection via MySQL Quote Method

  An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is config…

  OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  Jun 1, 2026
• Medium 4.5
  CVE-2026-6060 Public exploit

  Possible DoS via SQL Box

  A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS:  * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X befor…

  OTRS OTRS otrs2 znuny Ubuntu
  Apr 20, 2026
• Medium 6.1
  CVE-2025-52204 Public exploit

  A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomer…

  otrs2 znuny znuny Debian Ubuntu
  Mar 23, 2026
• Medium 6.1
  CVE-2019-11358 Public exploit EPSS 87%

  XSS in jQuery as used in Drupal, Backdrop CMS, and other products

  jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

  mediawiki mediawiki django drupal/core Debian Ubuntu Azure Linux Alpine npm Packagist Maven PyPI NuGet RubyGems
  Apr 19, 2019
• Unscored —
  CVE-2017-16921 Public exploit EPSS 20%

  In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.…

  otrs2 otrs2 Debian Ubuntu
  Dec 8, 2017