Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/otrs2@6.0.19-1?distro=bullseye
purl pkg:deb/debian/otrs2@6.0.19-1?distro=bullseye
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-47tp-xcrf-vkf4 An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. In the customer or external frontend, personal information of agents (e.g., Name and mail address) can be disclosed in external notes. CVE-2019-12497
VCID-q4vw-md7c-53bs An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. An attacker could send a malicious email to an OTRS system. If a logged-in agent user quotes it, the email could cause the browser to load external image resources. CVE-2019-12248

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:37:50.361571+00:00 Debian Importer Fixing VCID-q4vw-md7c-53bs https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:10:17.259946+00:00 Debian Importer Fixing VCID-47tp-xcrf-vkf4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:55:34.117627+00:00 Debian Importer Fixing VCID-q4vw-md7c-53bs https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:08:21.407795+00:00 Debian Importer Fixing VCID-47tp-xcrf-vkf4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:49:15.468033+00:00 Debian Importer Fixing VCID-47tp-xcrf-vkf4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:49:15.447488+00:00 Debian Importer Fixing VCID-q4vw-md7c-53bs https://security-tracker.debian.org/tracker/data/json 38.1.0