OTRS OTRS
productDEA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
critical
by severity
0critical1high1medium0low
updated 2026-10-28
01
vulnerabilities (29)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-6387US | high8.1 | Exploit |
| CVE-2026-48188US | — | Exploit |
| CVE-2026-48208US | — | Exploit |
| CVE-2026-6060US | — | Exploit |
| CVE-2026-78355US | — | — |
| CVE-2023-4727US | — | — |
| CVE-2024-43442US | — | — |
| CVE-2026-93582US | — | — |
| CVE-2024-43444US | — | — |
| CVE-2024-43443US | — | — |
| CVE-2026-78357US | — | — |
| CVE-2026-78356US | — | — |
| CVE-2025-24388US | — | — |
| CVE-2025-24391US | — | — |
| CVE-2026-48210US | — | — |
| CVE-2024-43445US | — | — |
| CVE-2026-48209US | — | — |
| CVE-2025-24390US | — | — |
| CVE-2026-48187US | — | — |
| CVE-2026-48189US | — | — |
| CVE-2026-93581US | — | — |
| CVE-2026-78359US | — | — |
| CVE-2025-24387US | medium6.5 | — |
| CVE-2026-48212US | — | — |
| CVE-2026-48191US | —OT elevated | — |
| CVE-2026-48190US | —OT elevated | — |
| CVE-2025-24389US | — | — |
| CVE-2026-78358US | — | — |
| CVE-2026-48211US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
- CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
- CWE-400Uncontrolled Resource Consumption3 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-276Incorrect Default Permissions2 CVEs
- CWE-532Insertion of Sensitive Information into Log File2 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)29 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan