What’s Vulnerable › Vulnerabilities

CVE-2017-9299

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-05-29 · updated 2026-06-17
• Weakness: CWE-79

Description

Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as demonstrated by OrderBy=[XSS] and Direction=[XSS] attacks. NOTE: this CVE may have limited relevance because it represents a 2017 discovery of an issue in software from 2014. The 3.3.20 release, for example, is not affected.

Affected products

• OTRS AG OTRS: 3.3.9

References

• http://code610.blogspot.com/2017/05/turnkey-feat-otrs.html
• http://code610.blogspot.com/2017/05/turnkey-feat-otrs.html

Get alerted when CVE-2017-9299 or the next vulnerability affects your stack