Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/znuny@6.5.15-2
purl pkg:deb/debian/znuny@6.5.15-2
Next non-vulnerable version 6.5.18-1~bpo13+1
Latest non-vulnerable version 6.5.18-1~bpo13+1
Risk 3.1
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-4sdd-c9p8-3fac
Aliases:
CVE-2025-52204
A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter
6.5.18-1~bpo13+1
Affected by 0 other vulnerabilities.
VCID-zd8d-c1nk-g7a4
Aliases:
CVE-2025-3573
GHSA-rrj2-ph5q-jxw2
jquery-validation vulnerable to Cross-site Scripting Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary.
6.5.18-1~bpo13+1
Affected by 0 other vulnerabilities.
VCID-zhfb-ajkc-5uc4
Aliases:
CVE-2025-59490
6.5.18-1~bpo13+1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:52:10.690021+00:00 Debian Importer Affected by VCID-4sdd-c9p8-3fac https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:23:05.984329+00:00 Debian Importer Affected by VCID-zhfb-ajkc-5uc4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:56:14.670696+00:00 Debian Importer Affected by VCID-zd8d-c1nk-g7a4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:21:44.784196+00:00 Debian Importer Affected by VCID-4sdd-c9p8-3fac https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:15:59.266778+00:00 Debian Importer Affected by VCID-zhfb-ajkc-5uc4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:59:49.168755+00:00 Debian Importer Affected by VCID-zd8d-c1nk-g7a4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-08T18:53:37.476351+00:00 Debian Importer Affected by VCID-4sdd-c9p8-3fac https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T18:02:55.203893+00:00 Debian Importer Affected by VCID-zhfb-ajkc-5uc4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T17:52:33.961124+00:00 Debian Importer Affected by VCID-zd8d-c1nk-g7a4 https://security-tracker.debian.org/tracker/data/json 38.1.0