# cve.now: Otrs AG

The newest entries naming Otrs AG as an affected vendor (up to 200), of 81 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-48187](https://cve.now/CVE-2026-48187.md): Email with special content can lead to DoS (CVSS 5.7)
- [CVE-2026-48188](https://cve.now/CVE-2026-48188.md): SQL Injection via MySQL Quote Method (CVSS 9.1)
- [CVE-2026-48189](https://cve.now/CVE-2026-48189.md): Bypass DedicatedAgentToCustomerGroups Setting (CVSS 5.7)
- [CVE-2026-48190](https://cve.now/CVE-2026-48190.md): Incorrect handling of permissions in External Interface Config Item List module (CVSS 3.5)
- [CVE-2026-48191](https://cve.now/CVE-2026-48191.md): Wrong Permission Handling in Document Search Article Meta Filters (CVSS 3.5)
- [CVE-2026-48208](https://cve.now/CVE-2026-48208.md): Denial-of-Service via SVG Rendering in Ticket (CVSS 6.5)
- [CVE-2026-48209](https://cve.now/CVE-2026-48209.md): Reflected XSS in authenticated agent context (CVSS 7.1)
- [CVE-2026-48210](https://cve.now/CVE-2026-48210.md): Possible information disclosure via External Interface (CVSS 5.7)
- [CVE-2026-6060](https://cve.now/CVE-2026-6060.md): Possible DoS via SQL Box (CVSS 4.5)
- [CVE-2025-24391](https://cve.now/CVE-2025-24391.md): Possible user enumeration (CVSS 5.3)
- [CVE-2025-24388](https://cve.now/CVE-2025-24388.md): Unsafe handling of AJAX calls (CVSS 3.8)
- [CVE-2025-24387](https://cve.now/CVE-2025-24387.md): Missing CSRF protection (CVSS 4.8)
- [CVE-2025-24390](https://cve.now/CVE-2025-24390.md): Missing Cookie Flags (CVSS 6.8)
- [CVE-2025-24389](https://cve.now/CVE-2025-24389.md): SMTP Password will be shown in cleartext on some SMTP errors (CVSS 6.3)
- [CVE-2024-43446](https://cve.now/CVE-2024-43446.md): Improper check of permissions in Generic Interface (CVSS 3.5)
- [CVE-2024-43445](https://cve.now/CVE-2024-43445.md): Missing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffing (CVSS 5.4)
- [CVE-2024-43444](https://cve.now/CVE-2024-43444.md): Passwords are written to Admin Log Module (CVSS 8.2)
- [CVE-2024-43443](https://cve.now/CVE-2024-43443.md): Stored XSS in process management (CVSS 4.9)
- [CVE-2024-43442](https://cve.now/CVE-2024-43442.md): Stored XSS in System Configuration (CVSS 4.9)
- [CVE-2024-23794](https://cve.now/CVE-2024-23794.md): Agents are able to lock the ticket without the "Owner" permission (CVSS 5.2)
- [CVE-2024-6540](https://cve.now/CVE-2024-6540.md): Information exlosure in external interface (CVSS 5.7)
- [CVE-2024-23793](https://cve.now/CVE-2024-23793.md): Upload of files outside application directory (CVSS 6.3)
- [CVE-2024-23790](https://cve.now/CVE-2024-23790.md): Missing file type check in avatar picture upload (CVSS 3.5)
- [CVE-2024-23791](https://cve.now/CVE-2024-23791.md): Unnecessary data is written to log if issues during indexing occurs (CVSS 4.9)
- [CVE-2024-23792](https://cve.now/CVE-2024-23792.md): Insufficient access control (CVSS 5.3)
- [CVE-2023-6254](https://cve.now/CVE-2023-6254.md): Password is send back to client (CVSS 8.1)
- [CVE-2023-5421](https://cve.now/CVE-2023-5421.md): Possible XSS execution in customer information (CVSS 3.5)
- [CVE-2023-38059](https://cve.now/CVE-2023-38059.md): External pictures can be loaded even if not allowed by configuration (CVSS 5.3)
- [CVE-2023-5422](https://cve.now/CVE-2023-5422.md): SSL Certificates are not checked for E-Mail Handling (CVSS 8.7)
- [CVE-2023-38060](https://cve.now/CVE-2023-38060.md): Host header injection by attachments in web service (CVSS 6.3)
- [CVE-2023-38058](https://cve.now/CVE-2023-38058.md): Tickets can be moved without permissions (CVSS 4.1)
- [CVE-2023-38057](https://cve.now/CVE-2023-38057.md): XSS stored in survey answers (CVSS 4.1)
- [CVE-2023-38056](https://cve.now/CVE-2023-38056.md): Code execution via System Configuration (CVSS 7.2)
- [CVE-2023-2534](https://cve.now/CVE-2023-2534.md): Information disclouse and DoS via websocket push events (CVSS 7.6)
- [CVE-2023-1250](https://cve.now/CVE-2023-1250.md): Code execution through ACL creation (CVSS 7.4)
- [CVE-2023-1248](https://cve.now/CVE-2023-1248.md): Possible XSS in Ticket Actions (CVSS 6.1)
- [CVE-2022-4427](https://cve.now/CVE-2022-4427.md): SQL Injection via OTRS Search API (CVSS 6.5)
- [CVE-2022-39052](https://cve.now/CVE-2022-39052.md): DoS attack using email (CVSS 7.5)
- [CVE-2022-39051](https://cve.now/CVE-2022-39051.md): Perl Code execution in Template Toolkit (CVSS 6.8)
- [CVE-2022-39050](https://cve.now/CVE-2022-39050.md): Possible XSS stored in customer information (CVSS 4.6)
- [CVE-2022-39049](https://cve.now/CVE-2022-39049.md): Possible XSS in Admin Interface (CVSS 3.5)
- [CVE-2022-32741](https://cve.now/CVE-2022-32741.md): Information disclosure in Request New Password feature (CVSS 5.3)
- [CVE-2022-32740](https://cve.now/CVE-2022-32740.md): Information disclosure in the External Interface (CVSS 3.5)
- [CVE-2022-32739](https://cve.now/CVE-2022-32739.md): OTRS version number is always in the exported ICS files (CVSS 3.5)
- [CVE-2022-1004](https://cve.now/CVE-2022-1004.md): Information disclosure in the External Interface (CVSS 4.3)
- [CVE-2022-0475](https://cve.now/CVE-2022-0475.md): Possible XSS attack via translation (CVSS 3.5)
- [CVE-2021-36100](https://cve.now/CVE-2021-36100.md): Authenticated remote code execution (CVSS 6.4)
- [CVE-2022-0474](https://cve.now/CVE-2022-0474.md): Disclosure of mail addresses (CVSS 2.4)
- [CVE-2022-0473](https://cve.now/CVE-2022-0473.md): Dynamic field error message is vulnerable to XSS (CVSS 3.8)
- [CVE-2021-36097](https://cve.now/CVE-2021-36097.md): Agents are able to lock the ticket without the "Owner" permission (CVSS 3.5)
- [CVE-2021-36096](https://cve.now/CVE-2021-36096.md): Support Bundle includes S/Mime and PGP secret or PIN (CVSS 5.2)
- [CVE-2021-36095](https://cve.now/CVE-2021-36095.md): User enumeration issue using "lost password" feature (CVSS 5.3)
- [CVE-2021-36094](https://cve.now/CVE-2021-36094.md): XSS attack in appointment edit popup screen (CVSS 5.7)
- [CVE-2021-36093](https://cve.now/CVE-2021-36093.md): DoS attack using PostMaster filters (CVSS 5.3)
- [CVE-2021-36092](https://cve.now/CVE-2021-36092.md): XSS attack using special link in email (CVSS 6.5)
- [CVE-2021-36091](https://cve.now/CVE-2021-36091.md): Unautorized access to the calendar appointments (CVSS 3.5)
- [CVE-2021-21443](https://cve.now/CVE-2021-21443.md): Unautorized listing of the customer user emails (CVSS 3.5)
- [CVE-2021-21442](https://cve.now/CVE-2021-21442.md): XSS vulnerability in Time Accounting (CVSS 4.5)
- [CVE-2021-21440](https://cve.now/CVE-2021-21440.md): Support Bundle includes S/Mime and PGP keys (CVSS 5.2)
- [CVE-2021-21441](https://cve.now/CVE-2021-21441.md): XSS in the ticket overview screens (CVSS 7.5)
- [CVE-2021-21439](https://cve.now/CVE-2021-21439.md): Possible DoS attack using a special crafted URL in email body (CVSS 6.5)
- [CVE-2021-21438](https://cve.now/CVE-2021-21438.md): FAQ articles are shown to users without permission (CVSS 3.5)
- [CVE-2021-21437](https://cve.now/CVE-2021-21437.md): Config Items are shown to users without permission (CVSS 3.5)
- [CVE-2021-21436](https://cve.now/CVE-2021-21436.md): Agent is able to link customer's Config Items without permission (CVSS 3.5)
- [CVE-2021-21435](https://cve.now/CVE-2021-21435.md): Information exposure in PDF export (CVSS 5.7)
- [CVE-2021-21434](https://cve.now/CVE-2021-21434.md): XSS in Survey Module (CVSS 3.5)
- [CVE-2020-1779](https://cve.now/CVE-2020-1779.md): Dynamic templates reveal sensitive data when OTRS tags are used (CVSS 4.3)
- [CVE-2020-1778](https://cve.now/CVE-2020-1778.md): Bypassing user account validation (CVSS 4.1)
- [CVE-2020-1777](https://cve.now/CVE-2020-1777.md): Agent names disclosed in chat feature (CVSS 4.3)
- [CVE-2020-1776](https://cve.now/CVE-2020-1776.md): Invalidating or changing user does not invalidate session (CVSS 3.5)
- [CVE-2020-1775](https://cve.now/CVE-2020-1775.md): Information disclosure in external interface (CVSS 3.5)
- [CVE-2020-1774](https://cve.now/CVE-2020-1774.md): Information disclosure (CVSS 4.5)
- [CVE-2020-1773](https://cve.now/CVE-2020-1773.md): Session / Password / Password token leak (CVSS 7.3)
- [CVE-2020-1772](https://cve.now/CVE-2020-1772.md): Information Disclosure (CVSS 6.5)
- [CVE-2020-1771](https://cve.now/CVE-2020-1771.md): Possible XSS in Customer user address book (CVSS 4.6)
- [CVE-2020-1770](https://cve.now/CVE-2020-1770.md): Information disclosure in support bundle files (CVSS 2.4)
- [CVE-2020-1769](https://cve.now/CVE-2020-1769.md): Autocomplete in the form login screens (CVSS 3.5)
- [CVE-2020-1768](https://cve.now/CVE-2020-1768.md): External Interface does not invalidate session (CVSS 5.4)
- [CVE-2020-1767](https://cve.now/CVE-2020-1767.md): Possible to send drafted messages as wrong agent (CVSS 3.5)
- [CVE-2020-1766](https://cve.now/CVE-2020-1766.md): Improper handling of uploaded inline images (CVSS 2.0)
- [CVE-2020-1765](https://cve.now/CVE-2020-1765.md): Spoofing of From field in several screens (CVSS 3.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/otrs
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.