OTRS AG vulnerabilities
81 vulnerabilities
Known vulnerabilities in OTRS AG products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 12 products.
Products
12- OTRS75 vulnerabilities
- ((Otrs)) Community Edition45 vulnerabilities
- Otrscisincustomerfrontend2 vulnerabilities
- FAQ1 vulnerabilities
- Itsmconfigurationmanagement1 vulnerabilities
- Otrscalendarresourceplanning1 vulnerabilities
- Otrscustomcontactfields1 vulnerabilities
- Otrsstorm1 vulnerabilities
- Otrsticketforms1 vulnerabilities
- Survey1 vulnerabilities
- Systemmonitoring1 vulnerabilities
- Time Accounting1 vulnerabilities
CVE-2021-21441debianotrs2+4
EPSS score1.09%
There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions.CVE-2021-21436ubuntuotrs2+2EPSS score0.76%
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.CVE-2021-21442otrs agtime accounting+1EPSS score0.60%
In the project create screen it's possible to inject malicious JS code to the certain fields. The code might be executed in the Reporting screen. This issue affects: OTRS AG Time Accounting: 7.0.x versions prior to 7.0.19.CVE-2021-21435ubuntuotrs2+2EPSS score1.27%
Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions.CVE-2021-21434ubuntuotrs2+2EPSS score0.66%
Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. another agent who wants to make changes in the survey). This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions.CVE-2021-21443debianotrs2+4EPSS score0.82%
Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG ((OTRS)) Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27.CVE-2021-21437otrs agitsmconfigurationmanagement+3EPSS score0.67%
Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versionsCVE-2021-21439debianotrs2+4EPSS score0.88%
DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.CVE-2021-21440debianotrs2+4EPSS score0.79%
Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions.CVE-2021-21438otrs agfaq+3EPSS score0.63%
Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions.CVE-2021-36092ubuntuotrs2+3EPSS score0.72%
It's possible to create an email which contains specially crafted link and it can be used to perform XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition:6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions.CVE-2021-36097otrs agotrs+1EPSS score0.52%
Agents are able to lock the ticket without the "Owner" permission. Once the ticket is locked, it could be moved to the queue where the agent has "rw" permissions and gain a full control. This issue affects: OTRS AG OTRS 8.0.x version: 8.0.16 and prior versions.CVE-2021-36100debianotrs2+9EPSS score1.32%
Specially crafted string in OTRS system configuration can allow the execution of any system command.CVE-2021-36096ubuntuotrs2+3EPSS score0.45%
Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions.CVE-2021-36093ubuntuotrs2+3EPSS score1.11%
It's possible to create an email which can be stuck while being processed by PostMaster filters, causing DoS. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions.CVE-2021-36094ubuntuotrs2+3EPSS score0.59%
It's possible to craft a request for appointment edit screen, which could lead to the XSS attack. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.CVE-2021-36091debianotrs2+4EPSS score0.70%
Agents are able to list appointments in the calendars without required permissions. This issue affects: OTRS AG ((OTRS)) Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27.CVE-2021-36095ubuntuotrs2+3EPSS score0.94%
Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.CVE-2025-24391otrs agotrsEPSS score0.28%
A vulnerability in the External Interface of OTRS allows conclusions to be drawn about the existence of user accounts through different HTTP response codes and messages. This enables an attacker to systematically identify valid email addresses.
This issue affects:
* OTRS 7.0.X
* OTRS 8.0.X
* OTRS 2023.X
* OTRS 2024.X
* OTRS 2025.XCVE-2025-24390otrs agotrsEPSS score0.20%
A vulnerability in OTRS Application Server and reverse proxy settings allows session hijacking due to missing attributes for sensitive cookie settings in HTTPS sessions.
This issue affects:
* OTRS 7.0.X
* OTRS 8.0.X
* OTRS 2023.X
* OTRS 2024.X