Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-9139

Опубликовано: 17 фев. 2017
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:otrs:otrs:3.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta3:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta4:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta5:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta6:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta7:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.7:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.8:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.9:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.10:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.11:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.12:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.13:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.14:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.15:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.16:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.17:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.8:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.9:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.10:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.11:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.13:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.14:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.15:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.16:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.17:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.18:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.19:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.20:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.1.21:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.0:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.0:beta1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.0:beta2:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.0:beta3:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.0:beta4:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.0:beta5:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.6:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.8:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.9:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.10:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.11:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.12:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.13:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.14:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.15:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.2.16:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.0:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.0:beta1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.0:beta2:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.0:beta3:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.0:beta4:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.0:beta5:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.0:rc1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.3:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.4:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.5:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.6:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.7:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.8:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.9:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.10:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.11:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.12:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.13:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.14:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.3.15:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.0:beta3:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.0:beta4:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.0:beta5:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.3:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.4:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.5:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.6:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.7:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.8:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.9:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.10:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.11:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.12:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.13:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.14:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.15:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.16:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.17:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:4.0.18:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.0:beta3:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.0:beta4:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.0:beta5:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.3:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.4:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.5:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.6:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.7:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.8:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.9:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.10:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.11:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.12:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:5.0.13:*:*:*:*:*:*:*

EPSS

Процентиль: 46%
0.00233
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2016-9139

CVSS3: 6.1
ubuntu
почти 9 лет назад

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment.

debian логотип

CVE-2016-9139

CVSS3: 6.1
debian
почти 9 лет назад

Cross-site scripting (XSS) vulnerability in Open Ticket Request System ...

suse-cvrf логотип

openSUSE-SU-2016:2844-1

suse-cvrf
около 9 лет назад

Security update for otrs

github логотип

GHSA-fgw5-v59j-x5cw

CVSS3: 6.1
github
больше 3 лет назад

Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16, 4.0.x before 4.0.19, and 5.0.x before 5.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment.

EPSS

Процентиль: 46%
0.00233
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79