agentprime: otrs-ag-otrs-community-editionEvery new CVE for otrs-ag-otrs-community-edition.https://agentprime.io/CVE-2026-48187: Email with special content can lead to DoShttps://agentprime.io/advisories/CVE-2026-48187/https://agentprime.io/advisories/CVE-2026-48187/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:33:23 GMTCVECVE-2026-48188: SQL Injection via MySQL Quote Methodhttps://agentprime.io/advisories/CVE-2026-48188/https://agentprime.io/advisories/CVE-2026-48188/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:33:15 GMTCVEcriticalCVE-2026-48208: Denial-of-Service via SVG Rendering in Tickethttps://agentprime.io/advisories/CVE-2026-48208/https://agentprime.io/advisories/CVE-2026-48208/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:32:38 GMTCVECVE-2026-48209: Reflected XSS in authenticated agent contexthttps://agentprime.io/advisories/CVE-2026-48209/https://agentprime.io/advisories/CVE-2026-48209/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:32:28 GMTCVECVE-2025-24388: Unsafe handling of AJAX callshttps://agentprime.io/advisories/CVE-2025-24388/https://agentprime.io/advisories/CVE-2025-24388/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 11:29:20 GMTCVECVE-2025-24389: SMTP Password will be shown in cleartext on some SMTP errorshttps://agentprime.io/advisories/CVE-2025-24389/https://agentprime.io/advisories/CVE-2025-24389/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 05:59:01 GMTCVECVE-2024-43446: Improper check of permissions in Generic Interfacehttps://agentprime.io/advisories/CVE-2024-43446/https://agentprime.io/advisories/CVE-2024-43446/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 05:58:29 GMTCVECVE-2024-43445: Missing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffinghttps://agentprime.io/advisories/CVE-2024-43445/https://agentprime.io/advisories/CVE-2024-43445/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 05:58:11 GMTCVECVE-2024-43444: Passwords are written to Admin Log Modulehttps://agentprime.io/advisories/CVE-2024-43444/https://agentprime.io/advisories/CVE-2024-43444/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Aug 2024 08:42:58 GMTCVECVE-2024-43443: Stored XSS in process managementhttps://agentprime.io/advisories/CVE-2024-43443/https://agentprime.io/advisories/CVE-2024-43443/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Aug 2024 08:42:55 GMTCVECVE-2024-43442: Stored XSS in System Configurationhttps://agentprime.io/advisories/CVE-2024-43442/https://agentprime.io/advisories/CVE-2024-43442/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Aug 2024 08:42:39 GMTCVECVE-2024-23793: Upload of files outside application directoryhttps://agentprime.io/advisories/CVE-2024-23793/https://agentprime.io/advisories/CVE-2024-23793/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:06:58 GMTCVECVE-2023-5421: Possible XSS execution in customer informationhttps://agentprime.io/advisories/CVE-2023-5421/https://agentprime.io/advisories/CVE-2023-5421/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 08:10:55 GMTCVECVE-2023-38059: External pictures can be loaded even if not allowed by configurationhttps://agentprime.io/advisories/CVE-2023-38059/https://agentprime.io/advisories/CVE-2023-38059/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 08:10:44 GMTCVECVE-2023-5422: SSL Certificates are not checked for E-Mail Handlinghttps://agentprime.io/advisories/CVE-2023-5422/https://agentprime.io/advisories/CVE-2023-5422/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 08:10:35 GMTCVECVE-2023-38060: Host header injection by attachments in web servicehttps://agentprime.io/advisories/CVE-2023-38060/https://agentprime.io/advisories/CVE-2023-38060/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 08:28:13 GMTCVECVE-2023-38057: XSS stored in survey answershttps://agentprime.io/advisories/CVE-2023-38057/https://agentprime.io/advisories/CVE-2023-38057/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 08:27:55 GMTCVECVE-2023-38056: Code execution via System Configurationhttps://agentprime.io/advisories/CVE-2023-38056/https://agentprime.io/advisories/CVE-2023-38056/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 08:27:13 GMTCVECVE-2023-1250: Code execution through ACL creationhttps://agentprime.io/advisories/CVE-2023-1250/https://agentprime.io/advisories/CVE-2023-1250/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Mar 2023 08:20:39 GMTCVECVE-2023-1248: Possible XSS in Ticket Actionshttps://agentprime.io/advisories/CVE-2023-1248/https://agentprime.io/advisories/CVE-2023-1248/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Mar 2023 08:19:34 GMTCVECVE-2022-4427: SQL Injection via OTRS Search APIhttps://agentprime.io/advisories/CVE-2022-4427/https://agentprime.io/advisories/CVE-2022-4427/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Dec 2022 08:09:51 GMTCVECVE-2022-39052: DoS attack using emailhttps://agentprime.io/advisories/CVE-2022-39052/https://agentprime.io/advisories/CVE-2022-39052/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Oct 2022 08:55:10 GMTCVECVE-2022-39051: Perl Code execution in Template Toolkithttps://agentprime.io/advisories/CVE-2022-39051/https://agentprime.io/advisories/CVE-2022-39051/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Sep 2022 06:40:12 GMTCVECVE-2022-39050: Possible XSS stored in customer informationhttps://agentprime.io/advisories/CVE-2022-39050/https://agentprime.io/advisories/CVE-2022-39050/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Sep 2022 06:40:11 GMTCVECVE-2022-39049: Possible XSS in Admin Interfacehttps://agentprime.io/advisories/CVE-2022-39049/https://agentprime.io/advisories/CVE-2022-39049/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Sep 2022 06:40:11 GMTCVECVE-2021-36100: Authenticated remote code executionhttps://agentprime.io/advisories/CVE-2021-36100/https://agentprime.io/advisories/CVE-2021-36100/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Mar 2022 09:15:24 GMTCVECVE-2021-36096: Support Bundle includes S/Mime and PGP secret or PINhttps://agentprime.io/advisories/CVE-2021-36096/https://agentprime.io/advisories/CVE-2021-36096/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Sep 2021 14:50:11 GMTCVECVE-2021-36095: User enumeration issue using "lost password" featurehttps://agentprime.io/advisories/CVE-2021-36095/https://agentprime.io/advisories/CVE-2021-36095/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Sep 2021 13:15:27 GMTCVECVE-2021-36094: XSS attack in appointment edit popup screenhttps://agentprime.io/advisories/CVE-2021-36094/https://agentprime.io/advisories/CVE-2021-36094/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Sep 2021 13:15:25 GMTCVECVE-2021-36093: DoS attack using PostMaster filtershttps://agentprime.io/advisories/CVE-2021-36093/https://agentprime.io/advisories/CVE-2021-36093/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Sep 2021 13:15:24 GMTCVECVE-2021-36092: XSS attack using special link in emailhttps://agentprime.io/advisories/CVE-2021-36092/https://agentprime.io/advisories/CVE-2021-36092/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jul 2021 04:25:43 GMTCVECVE-2021-36091: Unautorized access to the calendar appointmentshttps://agentprime.io/advisories/CVE-2021-36091/https://agentprime.io/advisories/CVE-2021-36091/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jul 2021 04:25:41 GMTCVECVE-2021-21443: Unautorized listing of the customer user emailshttps://agentprime.io/advisories/CVE-2021-21443/https://agentprime.io/advisories/CVE-2021-21443/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jul 2021 04:25:40 GMTCVECVE-2021-21440: Support Bundle includes S/Mime and PGP keyshttps://agentprime.io/advisories/CVE-2021-21440/https://agentprime.io/advisories/CVE-2021-21440/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jul 2021 04:25:37 GMTCVECVE-2021-21441: XSS in the ticket overview screenshttps://agentprime.io/advisories/CVE-2021-21441/https://agentprime.io/advisories/CVE-2021-21441/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Jun 2021 09:50:11 GMTCVECVE-2021-21439: Possible DoS attack using a special crafted URL in email bodyhttps://agentprime.io/advisories/CVE-2021-21439/https://agentprime.io/advisories/CVE-2021-21439/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Jun 2021 07:55:10 GMTCVECVE-2020-1776: Invalidating or changing user does not invalidate sessionhttps://agentprime.io/advisories/CVE-2020-1776/https://agentprime.io/advisories/CVE-2020-1776/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2020 21:04:19 GMTCVECVE-2020-1774: Information disclosurehttps://agentprime.io/advisories/CVE-2020-1774/https://agentprime.io/advisories/CVE-2020-1774/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Apr 2020 13:54:26 GMTCVECVE-2020-1773: Session / Password / Password token leakhttps://agentprime.io/advisories/CVE-2020-1773/https://agentprime.io/advisories/CVE-2020-1773/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2020 12:47:49 GMTCVECVE-2020-1772: Information Disclosurehttps://agentprime.io/advisories/CVE-2020-1772/https://agentprime.io/advisories/CVE-2020-1772/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2020 12:47:49 GMTCVECVE-2020-1771: Possible XSS in Customer user address bookhttps://agentprime.io/advisories/CVE-2020-1771/https://agentprime.io/advisories/CVE-2020-1771/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2020 12:47:49 GMTCVECVE-2020-1770: Information disclosure in support bundle fileshttps://agentprime.io/advisories/CVE-2020-1770/https://agentprime.io/advisories/CVE-2020-1770/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2020 12:47:49 GMTCVECVE-2020-1769: Autocomplete in the form login screenshttps://agentprime.io/advisories/CVE-2020-1769/https://agentprime.io/advisories/CVE-2020-1769/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2020 12:47:49 GMTCVECVE-2020-1767: Possible to send drafted messages as wrong agenthttps://agentprime.io/advisories/CVE-2020-1767/https://agentprime.io/advisories/CVE-2020-1767/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jan 2020 15:09:00 GMTCVECVE-2020-1766: Improper handling of uploaded inline imageshttps://agentprime.io/advisories/CVE-2020-1766/https://agentprime.io/advisories/CVE-2020-1766/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jan 2020 15:08:57 GMTCVECVE-2020-1765: Spoofing of From field in several screenshttps://agentprime.io/advisories/CVE-2020-1765/https://agentprime.io/advisories/CVE-2020-1765/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jan 2020 15:08:55 GMTCVE