CVE-2005-3895: otrs

EPSS trend

Probability

2.05%

Chance of exploitation in the next 30 days

Percentile

81%

Versus all other CVEs

30-day change

0.00 pp

From 2.05% on 21-09-2026

21-09-202621-10-2026

EPSS score

2.05%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

14 links

secunia.com/advisories/18887Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.htmlMailing ListX Refsource FULLDISC
moritz-naumann.com/adv/0007/otrsmulti/0007.txtX Refsource MISCPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/23355VDB EntryX Refsource XF
www.osvdb.org/21066VDB EntryX Refsource OSVDB
securityreason.com/securityalert/200Third Party AdvisoryX Refsource SREASON
otrs.org/advisory/OSA-2005-01-en/X Refsource CONFIRMPatchVendor Advisory
marc.info?l=bugtraq&m=113272360804853&w=2Mailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2005/2535VDB EntryX Refsource VUPEN
www.debian.org/security/2006/dsa-973Vendor AdvisoryX Refsource DEBIAN

Show all 14 references

secunia.com/advisories/18101Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2005_30_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/17685/Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/15537/VDB EntryX Refsource BIDPatch

Related vulnerabilities

CVE-2018-11563debianotrs2+30.82%7y ago08-07-2019 12:23An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application.CVE-2018-20800debianotrs2+20.99%7y ago13-03-2019 22:00An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major updates) will experience data loss in their agent preferences table.CVE-2018-17883debianotrs2+20.44%3y ago15-04-2023 00:00An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker could send an e-mail message with a malicious link to an OTRS system or an agent. If a logged-in agent opens this link, it could cause the execution of JavaScript in the context of OTRS.CVE-2018-7567debianotrs2+25.20%8y ago04-03-2018 20:00In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server during package installation. NOTE: the vendor disputes this issue stating "the behaviour is as designed and needed for different packages to be installed", "there is a security warning if the package is not verified by OTRS Group", and "there is the possibility and responsibility of an admin to check packages before installation which is possible as they are not binary.CVE-2018-10198debianotrs2+20.95%8y ago06-06-2018 20:00An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets.CVE-2013-4718otrsotrs+10.67%5y ago09-08-2021 18:03Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML via an ITSM ConfigItem search.

All vulnerabilities inotrs

CVE-2005-3895: otrs

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References