Skip to content
OpenAdvisories

Vendor

OTRS

81 known vulnerabilities.

Products

OTRS 75 ((OTRS)) Community Edition 46 OTRSCIsInCustomerFrontend 2 OTRSTicketForms 1 SystemMonitoring 1 OTRSSTORM 1 Survey 1 FAQ 1 ITSMConfigurationManagement 1 Time Accounting 1 OTRSCustomContactFields 1 OTRSCalendarResourcePlanning 1 OTRS <= 7.0.7 0 OTRS <= 6.0.19 0 OTRS <= 5.0.36 0 OTRS < 5.0.37 0 OTRS < 6.0.20 0 OTRS < 7.0.9 0 OTRS < 6.0.21 (Business) 0 OTRS < 7.0.12 0 OTRS 8.x < Patch 2024.1.1 0 OTRS < 6.0.23 0 OTRS 2023.x < Patch 2024.1.1 0 OTRS < 5.0.38 0 OTRS 2023.x < LTS 7.0.49 0 OTRS < 7.0.13 0 OTRS < 6.0.24 0 OTRS < 5.0.39 0 OTRS < 7.0.14 0 OTRS <= 6.0.24_community 0 OTRS <= 5.0.39_community 0 OTRS < 7.0.16 0 OTRS < 6.0.27_Community 0 OTRS < 5.0.42_Community 0 OTRS < 7.0.17 0 OTRS < 6.0.28 Community 0 OTRS < 5.0.43 Community 0 OTRS < 8.0.5 0 OTRS < 7.0.19 0 OTRS < 6.0.29 community 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-48188 Public exploit

    SQL Injection via MySQL Quote Method

    An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue only affects the system if the MySQL/MariaDB server is config…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Debian Ubuntu
  • Medium 6.5
    CVE-2026-48208 Public exploit

    Denial-of-Service via SVG Rendering in Ticket

    An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloads via email content, leading to browser-side resource exhaustion and denial of service when…

    OTRS OTRS ((OTRS)) Community Edition
  • Medium 4.5
    CVE-2026-6060 Public exploit

    Possible DoS via SQL Box

    A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS:  * 7.0.X * 8.0.X * 2023.X * 2024.X * 2025.X * 2026.X befor…

    OTRS OTRS otrs2 znuny Ubuntu