Otrs Gmbh (Former Otrs Ag) Otrs
4 CVEs affecting Otrs Gmbh (Former Otrs Ag) Otrs. Latest disclosed: 2026-10-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-93581 | Medium | 6.1 | 2026-10-12 | User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authentic… |
CVE-2026-78359 | Medium | 5.4 | 2026-10-12 | OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as… |
CVE-2026-78356 | Medium | 5.3 | 2026-10-12 | The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal applicatio… |
CVE-2026-78358 | Medium | 4.3 | 2026-10-12 | Several administrative actions do not sufficiently validate whether a request was intentionally initiated by the authenticated user. In particular, the DBUpdat… |