OTRS AG OTRS

• CVE-2021-36095 Medium 5.3 User enumeration issue using "lost password" feature 0.9%
• CVE-2021-36094 Medium 5.7 XSS attack in appointment edit popup screen 0.6%
• CVE-2021-36093 Medium 5.3 DoS attack using PostMaster filters 1.1%
• CVE-2021-36092 Medium 6.5 XSS attack using special link in email 0.7%
• CVE-2021-36091 Low 3.5 Unautorized access to the calendar appointments 0.7%
• CVE-2021-21443 Low 3.5 Unautorized listing of the customer user emails 0.8%
• CVE-2021-21440 Medium 5.2 Support Bundle includes S/Mime and PGP keys 0.8%
• CVE-2021-21441 High 7.5 XSS in the ticket overview screens 1.1%
• CVE-2021-21439 Medium 6.5 Possible DoS attack using a special crafted URL in email body 0.9%
• CVE-2021-21438 Low 3.5 FAQ articles are shown to users without permission 0.6%
• CVE-2021-21435 Medium 5.7 Information exposure in PDF export 1.3%
• CVE-2020-1778 Medium 4.1 Bypassing user account validation 0.7%
• CVE-2020-1777 Medium 4.3 Agent names disclosed in chat feature 0.8%
• CVE-2020-1776 Low 3.5 Invalidating or changing user does not invalidate session 0.9%
• CVE-2020-1775 Low 3.5 Information disclosure in external interface 0.8%
• CVE-2020-1774 Medium 4.5 Information disclosure 0.9%
• CVE-2020-1773 High 7.3 Session / Password / Password token leak 1.5%
• CVE-2020-1772 Medium 6.5 Information Disclosure 1.6%
• CVE-2020-1771 Medium 4.6 Possible XSS in Customer user address book 1.0%
• CVE-2020-1770 Low 2.4 Information disclosure in support bundle files 1.3%
• CVE-2020-1769 Low 3.5 Autocomplete in the form login screens 1.2%
• CVE-2020-1768 Medium 5.4 External Interface does not invalidate session 0.7%
• CVE-2020-1767 Low 3.5 Possible to send drafted messages as wrong agent 1.2%
• CVE-2020-1766 Low 2.0 Improper handling of uploaded inline images 1.2%
• CVE-2020-1765 Low 3.5 Spoofing of From field in several screens 1.5%