CVE Tools
Track your stack

Otrs-ag

28 CVEs tracked since 2020. Since Jan 2020, none of them reached CISA KEV.

Otrs-ag CVEs per month

Jan 2020 to Jul 2023. Point at a month, or focus the strip and use the arrow keys.
Otrs-ag CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-0130
2020-02null or fewer
2020-0350
2020-04null or fewer
2020-05null or fewer
2020-06null or fewer
2020-07null or fewer
2020-08null or fewer
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-0240
2021-03null or fewer
2021-04null or fewer
2021-05null or fewer
2021-06null or fewer
2021-0750
2021-08null or fewer
2021-0940
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-01null or fewer
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-0930
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-0740

Products

The products that kept showing up in Otrs-ag's monthly top three, with their CVEs summed over those months.

  1. Otrs247 months
  2. ((Otrs)) Community Edition226 months
  3. Otrscisincustomerfrontend11 month
  4. Survey11 month
  5. Time Accounting11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Otrs-ag.

  1. CVE-2026-48187Email with special content can lead to DoS5.7
  2. CVE-2026-48188SQL Injection via MySQL Quote Method9.1
  3. CVE-2026-48189Bypass DedicatedAgentToCustomerGroups Setting5.7
  4. CVE-2026-48190Incorrect handling of permissions in External Interface Config Item List module3.5
  5. CVE-2026-48191Wrong Permission Handling in Document Search Article Meta Filters3.5
  6. CVE-2026-48208Denial-of-Service via SVG Rendering in Ticket6.5
  7. CVE-2026-48209Reflected XSS in authenticated agent context7.1
  8. CVE-2026-48210Possible information disclosure via External Interface5.7
  9. CVE-2026-6060Possible DoS via SQL Box4.5
  10. CVE-2025-24391Possible user enumeration5.3
  11. CVE-2025-24388Unsafe handling of AJAX calls3.8
  12. CVE-2025-24387Missing CSRF protection4.8
  13. CVE-2025-24390Missing Cookie Flags6.8
  14. CVE-2025-24389SMTP Password will be shown in cleartext on some SMTP errors6.3
  15. CVE-2024-43446Improper check of permissions in Generic Interface3.5

The record

Peak rank
#92 in Jul 2021
Busiest month shown
Mar 2020, 5 CVEs
Months with a KEV entry
0 since Jan 2020
Monthly snapshots
7 since 2020
Otrs-ag's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store