Otrs Vulnerabilità

Sequenza temporale

Genere

Prodotto

OTRS Community Edition20
OTRS Open Ticket Request System4
OTRS Time Accounting2
OTRS OTRSCIsInCustomerFrontend2
OTRS Help Desk2

Contromisure

Official Fix14
Temporary Fix0
Workaround0
Unavailable0
Not Defined16

Sfruttabilità

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined28

Accesso al vettore

Not Defined0
Physical0
Local2
Adjacent0
Network28

Autenticazione

Not Defined0
High4
Low20
None6

Interazione dell'utente

Not Defined0
Required20
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤410
≤56
≤64
≤76
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤410
≤56
≤68
≤72
≤82
≤90
≤100

VulDB

≤10
≤20
≤32
≤412
≤56
≤64
≤76
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤44
≤52
≤60
≤72
≤84
≤90
≤100

CNA

≤10
≤20
≤30
≤42
≤50
≤60
≤72
≤82
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k12
<2k14
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k30
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (10): Community Edition (22), FAQ (1), Help Desk (1), Help Desk before (1), ITSM (1), OTRSCIsInCustomerFrontend (1), OTRSTicketForms (1), Open Ticket Request System (2), Survey (1), Time Accounting (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
20/03/20235.25.1OTRS Community Edition Ticket Action Module cross site scriptingService Management SoftwareNot DefinedOfficial Fix0.000630.04CVE-2023-1248
20/03/20237.27.1OTRS Community Edition ACL Module escalazione di privilegiService Management SoftwareNot DefinedOfficial Fix0.000420.00CVE-2023-1250
19/12/20227.57.4OTRS Community Edition TicketSearch Webservice sql injectionService Management SoftwareNot DefinedOfficial Fix0.001320.05CVE-2022-4427
06/09/20213.53.5OTRS Community Edition Appointment Edit Screen cross site scriptingService Management SoftwareNot DefinedNot Defined0.000540.00CVE-2021-36094
06/09/20212.72.7OTRS Community Edition Folder rivelazione di un 'informazioneService Management SoftwareNot DefinedNot Defined0.000650.00CVE-2021-36096
06/09/20213.73.7OTRS Community Edition Lost Password rivelazione di un 'informazioneService Management SoftwareNot DefinedNot Defined0.000730.00CVE-2021-36095
06/09/20215.35.3OTRS Community Edition Email denial of serviceService Management SoftwareNot DefinedNot Defined0.000850.00CVE-2021-36093
10/08/20213.53.4OTRS Open Ticket Request System cross site scriptingTicket Tracking SoftwareNot DefinedOfficial Fix0.000660.04CVE-2013-4718
10/08/20216.36.0OTRS Open Ticket Request System PreferencesCustomQueue.pm sql injectionTicket Tracking SoftwareNot DefinedOfficial Fix0.001100.00CVE-2013-4717
26/07/20214.34.3OTRS Community Edition Email cross site scriptingService Management SoftwareNot DefinedNot Defined0.000780.00CVE-2021-36092

20 non vengono visualizzate più voci

Interested in the pricing of exploits?

See the underground prices here!