CVE catalog

CVE-2013-4717

UBUNTU-CVE-2013-4717

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.32% · Oct 25, 2026

Multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianotrs2112.0.4p01-10vulnerable
Debianotrs2112.0.4p01-11vulnerable
Debianotrs2112.0.4p01-12vulnerable
Debianotrs2112.0.4p01-13vulnerable
Debianotrs2112.0.4p01-14vulnerable
Debianotrs2112.0.4p01-14.1vulnerable
Debianotrs2112.0.4p01-15vulnerable
Debianotrs2112.0.4p01-16vulnerable
Debianotrs2112.0.4p01-17vulnerable
Debianotrs2112.0.4p01-18vulnerable
Debianotrs2112.0.4p01-6vulnerable
Debianotrs2112.0.4p01-7vulnerable
Debianotrs2112.0.4p01-8vulnerable
Debianotrs2112.0.4p01-9vulnerable
Debianotrs2112.0.99beta1-1vulnerable
Debianotrs2112.0.99beta1-2vulnerable
Debianotrs2112.1.1-1vulnerable
Debianotrs2112.1.3-1vulnerable
Debianotrs2112.1.4-1vulnerable
Debianotrs2112.1.4-2vulnerable
Debianotrs2112.1.5-1vulnerable
Debianotrs2112.1.5-2vulnerable
Debianotrs2112.1.5-3vulnerable
Debianotrs2112.1.6-1vulnerable
Debianotrs2112.1.7-1vulnerable
Debianotrs2112.1.7-2vulnerable
Debianotrs2112.2.0~beta2-1vulnerable
Debianotrs2112.2.0~beta3-1vulnerable
Debianotrs2112.2.1-1vulnerable
Debianotrs2112.2.2-1vulnerable
Debianotrs2112.2.3-1vulnerable
Debianotrs2112.2.4-1vulnerable
Debianotrs2112.2.5-1vulnerable
Debianotrs2112.2.5-2vulnerable
Debianotrs2112.2.6-1vulnerable
Debianotrs2112.2.7-1vulnerable
Debianotrs2112.2.7-2vulnerable
Debianotrs2112.2.7-2lenny1vulnerable
Debianotrs2112.2.7-2lenny2vulnerable
Debianotrs2112.2.7-2lenny3vulnerable
Debianotrs2112.2.7-3vulnerable
Debianotrs2112.3.2-1vulnerable
Debianotrs2112.3.2-2vulnerable
Debianotrs2112.3.3-1vulnerable
Debianotrs2112.3.4-1vulnerable
Debianotrs2112.3.4-2vulnerable
Debianotrs2112.3.4-3vulnerable
Debianotrs2112.3.4-4vulnerable
Debianotrs2112.3.4-5vulnerable
Debianotrs2112.3.4-6vulnerable
Debianotrs2112.3.4-7vulnerable
Debianotrs2112.4.10+dfsg1-1vulnerable
Debianotrs2112.4.10+dfsg1-2vulnerable
Debianotrs2112.4.10+dfsg1-3vulnerable
Debianotrs2112.4.5-1vulnerable
Debianotrs2112.4.5-2vulnerable
Debianotrs2112.4.5-3vulnerable
Debianotrs2112.4.5-4vulnerable
Debianotrs2112.4.5-5vulnerable
Debianotrs2112.4.6-1vulnerable
Debianotrs2112.4.6-2vulnerable
Debianotrs2112.4.7+dfsg1-1vulnerable
Debianotrs2112.4.7-1vulnerable
Debianotrs2112.4.7-2vulnerable
Debianotrs2112.4.7-3vulnerable
Debianotrs2112.4.7-4vulnerable
Debianotrs2112.4.7-5vulnerable
Debianotrs2112.4.7-6vulnerable
Debianotrs2112.4.8+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-2vulnerable
Debianotrs2112.4.9+dfsg1-3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze1vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze4vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze5vulnerable
Debianotrs2112.4.9+dfsg1-4vulnerable
Debianotrs2112.4.9+dfsg1-5vulnerable
Debianotrs2113.0.10+dfsg1-1vulnerable
Debianotrs2113.0.10+dfsg1-2vulnerable
Debianotrs2113.0.11+dfsg1-1vulnerable
Debianotrs2113.0.8+dfsg1-1vulnerable
Debianotrs2113.0.9+dfsg1-1vulnerable
Debianotrs2113.1.0~beta4+dfsg1-1vulnerable
Debianotrs2113.1.0~beta5+dfsg1-1vulnerable
Debianotrs2113.1.0~rc1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-2vulnerable
Debianotrs2113.1.10+dfsg1-1vulnerable
Debianotrs2113.1.11+dfsg1-1vulnerable
Debianotrs2113.1.12+dfsg1-1vulnerable
Debianotrs2113.1.12+dfsg1-2vulnerable
Debianotrs2113.1.12+dfsg1-3vulnerable
Debianotrs2113.1.2+dfsg1-1vulnerable
Debianotrs2113.1.2+dfsg1-2vulnerable
Debianotrs2113.1.2+dfsg1-3vulnerable
Debianotrs2113.1.3+dfsg1-1vulnerable
Debianotrs2113.1.3+dfsg1-2vulnerable
Debianotrs2113.1.4+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-2vulnerable
Debianotrs2113.1.5+dfsg1-3vulnerable
Debianotrs2113.1.6+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-2vulnerable
Debianotrs2113.1.7+dfsg1-3vulnerable
Debianotrs2113.1.7+dfsg1-4vulnerable
Debianotrs2113.1.7+dfsg1-5vulnerable
Debianotrs2113.1.7+dfsg1-6vulnerable
Debianotrs2113.1.7+dfsg1-7vulnerable
Debianotrs2113.1.7+dfsg1-8vulnerable
Debianotrs2113.1.8+dfsg1-1vulnerable
Debianotrs2113.1.9+dfsg1-1vulnerable
Debianotrs2113.2.1+dfsg1-1vulnerable
Debianotrs2113.2.2+dfsg1-1vulnerable
Debianotrs2113.2.3+dfsg1-1vulnerable
Debianotrs2113.2.4-1vulnerable
Debianotrs2113.2.5-1vulnerable
Debianotrs2113.2.6-1vulnerable
Debianotrs2113.2.6-2vulnerable
Debianotrs2113.2.7-1vulnerable
Debianotrs2113.2.7-2vulnerable
Debianotrs2113.2.8-1vulnerable
Debianotrs2113.2.9-1fixed
Debianotrs26.02.4.9+dfsg1-3vulnerable
Debianotrs26.02.4.9+dfsg1-3+squeeze1vulnerable
Debianotrs26.02.4.9+dfsg1-3+squeeze3vulnerable
Debianotrs26.02.4.9+dfsg1-3+squeeze4fixed
Debianotrs273.1.7+dfsg1-8vulnerable
Debianotrs273.1.7+dfsg1-8+deb7u1vulnerable
Debianotrs273.1.7+dfsg1-8+deb7u2vulnerable
Debianotrs273.1.7+dfsg1-8+deb7u3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianotrs2deb113.2.9-1Not reportedDEBIAN-CVE-2013-4717Not reported
Debianotrs2deb6.02.4.9+dfsg1-3+squeeze4Not reportedDSA-2733-1Not reported
Debianotrs2deb73.1.7+dfsg1-8+deb7u3Not reportedDSA-2733-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References