OTRS AG Otrscisincustomerfrontend vulnerabilities

2 vulnerabilities

Known vulnerabilities in OTRS AG Otrscisincustomerfrontend, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2021-21436ubuntuotrs2+2
EPSS score
0.76%
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.4.3CVE-2021-21437otrs agitsmconfigurationmanagement+3
EPSS score
0.67%
Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions