agentprime: otrs

agentprime: otrsEvery new CVE for otrs.https://agentprime.io/CVE-2026-93582: Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authenticationhttps://agentprime.io/advisories/CVE-2026-93582/https://agentprime.io/advisories/CVE-2026-93582/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:49:38 GMTCVEcriticalCVE-2026-93581: Insufficient Neutralization of Formula Elements in CSV Exportshttps://agentprime.io/advisories/CVE-2026-93581/https://agentprime.io/advisories/CVE-2026-93581/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:49:31 GMTCVECVE-2026-78359: Duplicate Identity / Identity Shadowing across CustomerUser backendshttps://agentprime.io/advisories/CVE-2026-78359/https://agentprime.io/advisories/CVE-2026-78359/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:49:24 GMTCVECVE-2026-78358: Cross-Site Request Forgery in Administrative Actionshttps://agentprime.io/advisories/CVE-2026-78358/https://agentprime.io/advisories/CVE-2026-78358/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:49:18 GMTCVECVE-2026-78357: Insufficient Session Revocation for JWT Authenticationhttps://agentprime.io/advisories/CVE-2026-78357/https://agentprime.io/advisories/CVE-2026-78357/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:49:10 GMTCVEcriticalCVE-2026-78356: Unauthenticated Disclosure of Agent Frontend Configurationhttps://agentprime.io/advisories/CVE-2026-78356/https://agentprime.io/advisories/CVE-2026-78356/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:49:04 GMTCVECVE-2026-78355: Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directoryhttps://agentprime.io/advisories/CVE-2026-78355/https://agentprime.io/advisories/CVE-2026-78355/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:48:56 GMTCVECVE-2026-48212: Stored XSS in external pageshttps://agentprime.io/advisories/CVE-2026-48212/https://agentprime.io/advisories/CVE-2026-48212/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:48:50 GMTCVECVE-2026-48211: Cross-Site Request Forgery in Import/Export Admin consolehttps://agentprime.io/advisories/CVE-2026-48211/https://agentprime.io/advisories/CVE-2026-48211/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 06:48:42 GMTCVECVE-2026-48187: Email with special content can lead to DoShttps://agentprime.io/advisories/CVE-2026-48187/https://agentprime.io/advisories/CVE-2026-48187/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:33:23 GMTCVECVE-2026-48188: SQL Injection via MySQL Quote Methodhttps://agentprime.io/advisories/CVE-2026-48188/https://agentprime.io/advisories/CVE-2026-48188/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:33:15 GMTCVEcriticalCVE-2026-48189: Bypass DedicatedAgentToCustomerGroups Settinghttps://agentprime.io/advisories/CVE-2026-48189/https://agentprime.io/advisories/CVE-2026-48189/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:33:03 GMTCVECVE-2026-48190: Incorrect handling of permissions in External Interface Config Item List modulehttps://agentprime.io/advisories/CVE-2026-48190/https://agentprime.io/advisories/CVE-2026-48190/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:32:53 GMTCVECVE-2026-48191: Wrong Permission Handling in Document Search Article Meta Filtershttps://agentprime.io/advisories/CVE-2026-48191/https://agentprime.io/advisories/CVE-2026-48191/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:32:47 GMTCVECVE-2026-48208: Denial-of-Service via SVG Rendering in Tickethttps://agentprime.io/advisories/CVE-2026-48208/https://agentprime.io/advisories/CVE-2026-48208/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:32:38 GMTCVECVE-2026-48209: Reflected XSS in authenticated agent contexthttps://agentprime.io/advisories/CVE-2026-48209/https://agentprime.io/advisories/CVE-2026-48209/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:32:28 GMTCVECVE-2026-48210: Possible information disclosure via External Interfacehttps://agentprime.io/advisories/CVE-2026-48210/https://agentprime.io/advisories/CVE-2026-48210/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 31 May 2026 21:11:25 GMTCVECVE-2026-6060: Possible DoS via SQL Boxhttps://agentprime.io/advisories/CVE-2026-6060/https://agentprime.io/advisories/CVE-2026-6060/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Apr 2026 18:20:01 GMTCVECVE-2025-24391: Possible user enumerationhttps://agentprime.io/advisories/CVE-2025-24391/https://agentprime.io/advisories/CVE-2025-24391/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Jul 2025 08:15:58 GMTCVECVE-2025-24388: Unsafe handling of AJAX callshttps://agentprime.io/advisories/CVE-2025-24388/https://agentprime.io/advisories/CVE-2025-24388/CVSS 3.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 11:29:20 GMTCVECVE-2025-24387: Missing CSRF protectionhttps://agentprime.io/advisories/CVE-2025-24387/https://agentprime.io/advisories/CVE-2025-24387/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Mar 2025 09:28:31 GMTCVECVE-2025-24390: Missing Cookie Flagshttps://agentprime.io/advisories/CVE-2025-24390/https://agentprime.io/advisories/CVE-2025-24390/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 05:59:20 GMTCVECVE-2025-24389: SMTP Password will be shown in cleartext on some SMTP errorshttps://agentprime.io/advisories/CVE-2025-24389/https://agentprime.io/advisories/CVE-2025-24389/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 05:59:01 GMTCVECVE-2024-43446: Improper check of permissions in Generic Interfacehttps://agentprime.io/advisories/CVE-2024-43446/https://agentprime.io/advisories/CVE-2024-43446/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 05:58:29 GMTCVECVE-2024-43445: Missing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffinghttps://agentprime.io/advisories/CVE-2024-43445/https://agentprime.io/advisories/CVE-2024-43445/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 05:58:11 GMTCVECVE-2024-43444: Passwords are written to Admin Log Modulehttps://agentprime.io/advisories/CVE-2024-43444/https://agentprime.io/advisories/CVE-2024-43444/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Aug 2024 08:42:58 GMTCVECVE-2024-43443: Stored XSS in process managementhttps://agentprime.io/advisories/CVE-2024-43443/https://agentprime.io/advisories/CVE-2024-43443/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Aug 2024 08:42:55 GMTCVECVE-2024-43442: Stored XSS in System Configurationhttps://agentprime.io/advisories/CVE-2024-43442/https://agentprime.io/advisories/CVE-2024-43442/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Aug 2024 08:42:39 GMTCVECVE-2024-23794: Agents are able to lock the ticket without the "Owner" permissionhttps://agentprime.io/advisories/CVE-2024-23794/https://agentprime.io/advisories/CVE-2024-23794/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jul 2024 07:14:09 GMTCVECVE-2024-6540: Information exlosure in external interfacehttps://agentprime.io/advisories/CVE-2024-6540/https://agentprime.io/advisories/CVE-2024-6540/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jul 2024 07:13:49 GMTCVECVE-2024-23793: Upload of files outside application directoryhttps://agentprime.io/advisories/CVE-2024-23793/https://agentprime.io/advisories/CVE-2024-23793/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 18:06:58 GMTCVECVE-2024-23790: Missing file type check in avatar picture uploadhttps://agentprime.io/advisories/CVE-2024-23790/https://agentprime.io/advisories/CVE-2024-23790/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 09:21:14 GMTCVECVE-2024-23791: Unnecessary data is written to log if issues during indexing occurshttps://agentprime.io/advisories/CVE-2024-23791/https://agentprime.io/advisories/CVE-2024-23791/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 09:21:00 GMTCVECVE-2024-23792: Insufficient access controlhttps://agentprime.io/advisories/CVE-2024-23792/https://agentprime.io/advisories/CVE-2024-23792/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 09:20:06 GMTCVECVE-2023-6254: Password is send back to clienthttps://agentprime.io/advisories/CVE-2023-6254/https://agentprime.io/advisories/CVE-2023-6254/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Nov 2023 09:44:00 GMTCVECVE-2023-5421: Possible XSS execution in customer informationhttps://agentprime.io/advisories/CVE-2023-5421/https://agentprime.io/advisories/CVE-2023-5421/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 08:10:55 GMTCVECVE-2023-38059: External pictures can be loaded even if not allowed by configurationhttps://agentprime.io/advisories/CVE-2023-38059/https://agentprime.io/advisories/CVE-2023-38059/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 08:10:44 GMTCVECVE-2023-5422: SSL Certificates are not checked for E-Mail Handlinghttps://agentprime.io/advisories/CVE-2023-5422/https://agentprime.io/advisories/CVE-2023-5422/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Oct 2023 08:10:35 GMTCVECVE-2023-38060: Host header injection by attachments in web servicehttps://agentprime.io/advisories/CVE-2023-38060/https://agentprime.io/advisories/CVE-2023-38060/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 08:28:13 GMTCVECVE-2023-38058: Tickets can be moved without permissionshttps://agentprime.io/advisories/CVE-2023-38058/https://agentprime.io/advisories/CVE-2023-38058/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 08:28:03 GMTCVECVE-2023-38057: XSS stored in survey answershttps://agentprime.io/advisories/CVE-2023-38057/https://agentprime.io/advisories/CVE-2023-38057/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 08:27:55 GMTCVECVE-2023-38056: Code execution via System Configurationhttps://agentprime.io/advisories/CVE-2023-38056/https://agentprime.io/advisories/CVE-2023-38056/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jul 2023 08:27:13 GMTCVECVE-2023-2534: Information disclouse and DoS via websocket push eventshttps://agentprime.io/advisories/CVE-2023-2534/https://agentprime.io/advisories/CVE-2023-2534/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 May 2023 07:29:49 GMTCVECVE-2023-1250: Code execution through ACL creationhttps://agentprime.io/advisories/CVE-2023-1250/https://agentprime.io/advisories/CVE-2023-1250/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Mar 2023 08:20:39 GMTCVECVE-2023-1248: Possible XSS in Ticket Actionshttps://agentprime.io/advisories/CVE-2023-1248/https://agentprime.io/advisories/CVE-2023-1248/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Mar 2023 08:19:34 GMTCVECVE-2022-4427: SQL Injection via OTRS Search APIhttps://agentprime.io/advisories/CVE-2022-4427/https://agentprime.io/advisories/CVE-2022-4427/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Dec 2022 08:09:51 GMTCVECVE-2022-39052: DoS attack using emailhttps://agentprime.io/advisories/CVE-2022-39052/https://agentprime.io/advisories/CVE-2022-39052/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Oct 2022 08:55:10 GMTCVECVE-2022-39051: Perl Code execution in Template Toolkithttps://agentprime.io/advisories/CVE-2022-39051/https://agentprime.io/advisories/CVE-2022-39051/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Sep 2022 06:40:12 GMTCVECVE-2022-39050: Possible XSS stored in customer informationhttps://agentprime.io/advisories/CVE-2022-39050/https://agentprime.io/advisories/CVE-2022-39050/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Sep 2022 06:40:11 GMTCVECVE-2022-39049: Possible XSS in Admin Interfacehttps://agentprime.io/advisories/CVE-2022-39049/https://agentprime.io/advisories/CVE-2022-39049/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Sep 2022 06:40:11 GMTCVE