CVE catalog

CVE-2012-2582

otrs-3.3.16-37.1 on GA media

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.20% · Oct 25, 2026

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV="CONTENT-TYPE" META element.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianotrs2112.0.4p01-10vulnerable
Debianotrs2112.0.4p01-11vulnerable
Debianotrs2112.0.4p01-12vulnerable
Debianotrs2112.0.4p01-13vulnerable
Debianotrs2112.0.4p01-14vulnerable
Debianotrs2112.0.4p01-14.1vulnerable
Debianotrs2112.0.4p01-15vulnerable
Debianotrs2112.0.4p01-16vulnerable
Debianotrs2112.0.4p01-17vulnerable
Debianotrs2112.0.4p01-18vulnerable
Debianotrs2112.0.4p01-6vulnerable
Debianotrs2112.0.4p01-7vulnerable
Debianotrs2112.0.4p01-8vulnerable
Debianotrs2112.0.4p01-9vulnerable
Debianotrs2112.0.99beta1-1vulnerable
Debianotrs2112.0.99beta1-2vulnerable
Debianotrs2112.1.1-1vulnerable
Debianotrs2112.1.3-1vulnerable
Debianotrs2112.1.4-1vulnerable
Debianotrs2112.1.4-2vulnerable
Debianotrs2112.1.5-1vulnerable
Debianotrs2112.1.5-2vulnerable
Debianotrs2112.1.5-3vulnerable
Debianotrs2112.1.6-1vulnerable
Debianotrs2112.1.7-1vulnerable
Debianotrs2112.1.7-2vulnerable
Debianotrs2112.2.0~beta2-1vulnerable
Debianotrs2112.2.0~beta3-1vulnerable
Debianotrs2112.2.1-1vulnerable
Debianotrs2112.2.2-1vulnerable
Debianotrs2112.2.3-1vulnerable
Debianotrs2112.2.4-1vulnerable
Debianotrs2112.2.5-1vulnerable
Debianotrs2112.2.5-2vulnerable
Debianotrs2112.2.6-1vulnerable
Debianotrs2112.2.7-1vulnerable
Debianotrs2112.2.7-2vulnerable
Debianotrs2112.2.7-2lenny1vulnerable
Debianotrs2112.2.7-2lenny2vulnerable
Debianotrs2112.2.7-2lenny3vulnerable
Debianotrs2112.2.7-3vulnerable
Debianotrs2112.3.2-1vulnerable
Debianotrs2112.3.2-2vulnerable
Debianotrs2112.3.3-1vulnerable
Debianotrs2112.3.4-1vulnerable
Debianotrs2112.3.4-2vulnerable
Debianotrs2112.3.4-3vulnerable
Debianotrs2112.3.4-4vulnerable
Debianotrs2112.3.4-5vulnerable
Debianotrs2112.3.4-6vulnerable
Debianotrs2112.3.4-7vulnerable
Debianotrs2112.4.10+dfsg1-1vulnerable
Debianotrs2112.4.10+dfsg1-2vulnerable
Debianotrs2112.4.10+dfsg1-3vulnerable
Debianotrs2112.4.5-1vulnerable
Debianotrs2112.4.5-2vulnerable
Debianotrs2112.4.5-3vulnerable
Debianotrs2112.4.5-4vulnerable
Debianotrs2112.4.5-5vulnerable
Debianotrs2112.4.6-1vulnerable
Debianotrs2112.4.6-2vulnerable
Debianotrs2112.4.7+dfsg1-1vulnerable
Debianotrs2112.4.7-1vulnerable
Debianotrs2112.4.7-2vulnerable
Debianotrs2112.4.7-3vulnerable
Debianotrs2112.4.7-4vulnerable
Debianotrs2112.4.7-5vulnerable
Debianotrs2112.4.7-6vulnerable
Debianotrs2112.4.8+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-2vulnerable
Debianotrs2112.4.9+dfsg1-3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze1vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze4vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze5vulnerable
Debianotrs2112.4.9+dfsg1-4vulnerable
Debianotrs2112.4.9+dfsg1-5vulnerable
Debianotrs2113.0.10+dfsg1-1vulnerable
Debianotrs2113.0.10+dfsg1-2vulnerable
Debianotrs2113.0.11+dfsg1-1vulnerable
Debianotrs2113.0.8+dfsg1-1vulnerable
Debianotrs2113.0.9+dfsg1-1vulnerable
Debianotrs2113.1.0~beta4+dfsg1-1vulnerable
Debianotrs2113.1.0~beta5+dfsg1-1vulnerable
Debianotrs2113.1.0~rc1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-2vulnerable
Debianotrs2113.1.2+dfsg1-1vulnerable
Debianotrs2113.1.2+dfsg1-2vulnerable
Debianotrs2113.1.2+dfsg1-3vulnerable
Debianotrs2113.1.3+dfsg1-1vulnerable
Debianotrs2113.1.3+dfsg1-2vulnerable
Debianotrs2113.1.4+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-2vulnerable
Debianotrs2113.1.5+dfsg1-3vulnerable
Debianotrs2113.1.6+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-2vulnerable
Debianotrs2113.1.7+dfsg1-3vulnerable
Debianotrs2113.1.7+dfsg1-4fixed
Debianotrs26.02.4.9+dfsg1-3vulnerable
Debianotrs26.02.4.9+dfsg1-3+squeeze1vulnerable
Debianotrs26.02.4.9+dfsg1-3+squeeze3fixed
Opensuseotrstumbleweed3.3.14-37.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianotrs2deb113.1.7+dfsg1-4Not reportedDEBIAN-CVE-2012-2582Not reported
Debianotrs2deb6.02.4.9+dfsg1-3+squeeze3Not reportedDSA-2536-1Not reported
Opensuseotrsrpmtumbleweed3.3.14-37.1Not reportedOPENSUSE-SU-2024:10073-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]