Open Ticket Request System Vulnerabilità

Versione

5.0.0	24
5.0.1	24
5.0.2	24
5.0.3	24
5.0.4	24

Contromisure

Official Fix	24
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	12

Sfruttabilità

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	34

Accesso al vettore

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	36

Autenticazione

Not Defined	0
High	2
Low	22
None	12

Interazione dell'utente

Not Defined	0
Required	16
None	20

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	6
≤5	8
≤6	8
≤7	8
≤8	4
≤9	0
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	10
≤6	8
≤7	6
≤8	4
≤9	0
≤10	2

VulDB

≤1	0
≤2	0
≤3	2
≤4	6
≤5	12
≤6	6
≤7	6
≤8	2
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	6
≤7	10
≤8	2
≤9	6
≤10	2

CNA

≤1	0
≤2	0
≤3	2
≤4	0
≤5	2
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fornitore

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 giorni

<1k	8
<2k	24
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	36
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (171): 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 3, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15, 3.0.16, 3.0.17, 3.0.18, 3.0.19, 3.0.21, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7, 3.1.8, 3.1.9, 3.1.11, 3.1.12, 3.1.13, 3.1.14, 3.1.15, 3.1.16, 3.1.17, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7, 3.2.8, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6, 3.3.7, 3.3.8, 3.3.9, 3.3.11, 3.3.12, 3.3.13, 3.3.14, 3.3.15, 3.3.16, 3.3.17, 3.3.18, 3.3.19, 4, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.11, 4.0.12, 4.0.13, 4.0.14, 4.0.15, 4.0.16, 4.0.17, 4.0.18, 4.0.19, 4.0.21, 4.0.22, 4.0.23, 4.0.24, 4.0.25, 4.0.26, 4.0.27, 4.0.28, 4.0.29, 4.0.31, 4.0.32, 5, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0.15, 5.0.16, 5.0.17, 5.0.18, 5.0.19, 5.0.21, 5.0.22, 5.0.23, 5.0.24, 5.0.25, 5.0.26, 5.0.27, 5.0.28, 5.0.29, 5.0.31, 5.0.32, 5.0.33, 5.0.34, 5.0.35, 5.0.36, 5.0.37, 5.0.38, 6, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.11, 6.0.12, 6.0.13, 6.0.14, 6.0.15, 6.0.16, 6.0.17, 6.0.18, 6.0.19, 6.0.21, 6.0.22, 6.0.23, 7, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.11, 7.0.12

Tipo di software: Ticket Tracking Software

Data di pubblicazione	Base	Temp	Vulnerabilità	0day	Oggi	Sfr	Con	CTI	CVE
10/08/2021	3.5	3.4	OTRS Open Ticket Request System cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-4718
10/08/2021	6.3	6.0	OTRS Open Ticket Request System PreferencesCustomQueue.pm sql injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-4717
19/03/2020	4.4	4.4	Open Ticket Request System cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.13	CVE-2019-16375
10/03/2020	4.3	4.3	Open Ticket Request System Company Ticket rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2019-13457
10/03/2020	4.3	4.3	Open Ticket Request System Search Result rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-10065
06/01/2020	3.5	3.5	Open Ticket Request System rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2019-18179
21/08/2019	4.5	4.4	Open Ticket Request System Notification Tag Template Hash escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-13458
21/08/2019	5.4	5.3	Open Ticket Request System Embedded Ticket IP Address rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-12746
08/07/2019	4.0	4.0	Open Ticket Request System OTRS Customer Panel escalazione di privilegi	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-11563
17/06/2019	5.3	5.3	Open Ticket Request System External Note rivelazione di un 'informazione	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-12497