VDB

CVE-2013-4717

CVE-2013-4717 REJECTED CVSS 8.800000190734863 HIGH

Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm.

EPSS 1.32% · 70.6th percentile

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.32%
70.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSotrs20, 3.2.9-2, 3.2.11-1
Ubuntu:18.04:LTSotrs20, 5.0.23-1, 5.0.24-1
Ubuntu:16.04:LTSotrs25.0.5-1, 4.0.10-1, 5.0.2-1

Timeline

  • Aug 9, 2021 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 5, 2022 CVE Updated
  • May 22, 2022 EPSS Score
  • Jul 15, 2022 EPSS Score
  • Oct 30, 2022 EPSS Score
  • Dec 22, 2022 EPSS Score
  • Feb 13, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 8, 2023 EPSS Score
  • May 31, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›