Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-q4vw-md7c-53bs
Vulnerability ID VCID-q4vw-md7c-53bs
Aliases CVE-2019-12248
Summary An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through 5.0.36. An attacker could send a malicious email to an OTRS system. If a logged-in agent user quotes it, the email could cause the browser to load external image resources.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00668 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00681 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
epss 0.00701 https://api.first.org/data/v1/epss?cve=CVE-2019-12248
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2019-12248
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12248
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.71235
EPSS Score 0.00668
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:33:31.318072+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0