otrs
Latest CVEs
The 15 most recently published vulnerabilities affecting otrs.
- CVE-2026-48187Email with special content can lead to DoS5.7
- CVE-2026-48188SQL Injection via MySQL Quote Method9.1
- CVE-2026-48189Bypass DedicatedAgentToCustomerGroups Setting5.7
- CVE-2026-48190Incorrect handling of permissions in External Interface Config Item List module3.5
- CVE-2026-48191Wrong Permission Handling in Document Search Article Meta Filters3.5
- CVE-2026-48208Denial-of-Service via SVG Rendering in Ticket6.5
- CVE-2026-48209Reflected XSS in authenticated agent context7.1
- CVE-2026-48210Possible information disclosure via External Interface5.7
- CVE-2025-24387Missing CSRF protection4.8
- CVE-2024-23794Agents are able to lock the ticket without the "Owner" permission5.2
- CVE-2024-6540Information exlosure in external interface5.7
- CVE-2024-23790Missing file type check in avatar picture upload3.5
- CVE-2024-23791Unnecessary data is written to log if issues during indexing occurs4.9
- CVE-2024-23792Insufficient access control5.3
- CVE-2023-6254Password is send back to client8.1