What’s Vulnerable › Products

OTRS AG ((OTRS)) Community Edition vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your OTRS AG ((OTRS)) Community Edition version is affected

Latest OTRS AG ((OTRS)) Community Edition vulnerabilities

• CVE-2025-24388 — Unsafe handling of AJAX calls (CVSS 3.8)
• CVE-2025-24389 — SMTP Password will be shown in cleartext on some SMTP errors (CVSS 6.3)
• CVE-2024-43446 — Improper check of permissions in Generic Interface (CVSS 3.5)
• CVE-2024-43445 — Missing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffing (CVSS 5.4)
• CVE-2024-43443 — Stored XSS in process management (CVSS 4.9)
• CVE-2024-43442 — Stored XSS in System Configuration (CVSS 4.9)
• CVE-2024-23793 — Upload of files outside application directory (CVSS 6.3)