Search for vulnerabilities
Vulnerability details: VCID-vq47-3fh1-aaad
Vulnerability ID VCID-vq47-3fh1-aaad
Aliases CVE-2011-1518
Summary Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.4.x before 2.4.10 and 3.x before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Status Published
Exploitability 0.5
Weighted Severity 3.9
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
System Score Found at
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00317 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00342 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00342 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00342 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00342 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00604 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
epss 0.00838 https://api.first.org/data/v1/epss?cve=CVE-2011-1518
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2011-1518
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
http://otrs.org/advisory/OSA-2011-01-en/
https://api.first.org/data/v1/epss?cve=CVE-2011-1518
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1518
http://secunia.com/advisories/44029
http://secunia.com/advisories/44479
https://exchange.xforce.ibmcloud.com/vulnerabilities/66698
http://www.debian.org/security/2011/dsa-2231
http://www.osvdb.org/71790
http://www.securityfocus.com/bid/47323
http://www.vupen.com/english/advisories/2011/1186
cpe:2.3:a:otrs:otrs:2.4.0:beta1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.0:beta1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.0:beta2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.0:beta2:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.0:beta3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.0:beta3:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.0:beta4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.0:beta4:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.0:beta5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.0:beta5:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.0:beta6:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.0:beta6:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.5:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.6:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.7:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.8:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:2.4.9:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:2.4.9:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta1:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta3:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.0:beta3:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta4:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.0:beta4:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.0:beta5:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta6:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.0:beta6:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.0:beta7:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.0:beta7:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:otrs:otrs:3.0.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:otrs:otrs:3.0.6:*:*:*:*:*:*:*
CVE-2011-1518 https://nvd.nist.gov/vuln/detail/CVE-2011-1518
No exploits are available.
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2011-1518
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.70928
EPSS Score 0.00317
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.