VDB
DEBIAN-CVE-2014-1695
DEBIAN-CVE-2014-1695
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML email.
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:11 | otrs2 | 0, 2.0.4, 2.0.4 |
Timeline
- Mar 1, 2014 CVE Published
- Apr 28, 2026 CVE Updated