CVEs published by OTRS AG

CVEs published by OTRS AG (CVE Numbering Authority). 9 tracked.

CVE-2026-93582 CRITICAL 9.4 The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated usern
CVE-2026-78355 HIGH 8.7 A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrat
CVE-2026-78357 CRITICAL 9.1 Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user ac
CVE-2026-78356 MEDIUM 5.3 The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthentic
CVE-2026-93581 MEDIUM 6.1 User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from
CVE-2026-78359 MEDIUM 5.4 OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured Custo
CVE-2026-48211 MEDIUM 5.4 An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross
CVE-2026-48212 MEDIUM 4.8 An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored
CVE-2026-78358 MEDIUM 4.3 Several administrative actions do not sufficiently validate whether a request was intentionally initiated by t