VDB
CVE-2013-2637
CVE-2013-2637
PUBLISHED
CVSS 6.099999904632568 MEDIUM
A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior to 2.1.4 and 2.0.8 via changes, workorder items, and FAQ articles, which could let a remote malicious user execute arbitrary code.
EPSS 4.30% · 91.1th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
4.30%
91.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| otrs | otrs_itsm | 3.2.0, 3.1.0, 0 |
| n/a | n/a | n/a |
| otrs | faq | 0, 2.1.0 |
| opensuse | opensuse | 12.3, 12.2 |
Timeline
- Apr 8, 2013 PoC Published
- Feb 12, 2020 CVE Published
- Feb 4, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score
- Dec 2, 2023 EPSS Score