CVE catalog

CVE-2019-9892

UBUNTU-CVE-2019-9892

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.08% · Oct 27, 2026

An issue was discovered in Open Ticket Request System (OTRS) 5.x through 5.0.34, 6.x through 6.0.17, and 7.x through 7.0.6. An attacker who is logged into OTRS as an agent user with appropriate permissions may try to import carefully crafted Report Statistics XML that will result in reading of arbitrary files on the OTRS filesystem.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianotrs2112.0.4p01-10vulnerable
Debianotrs2112.0.4p01-11vulnerable
Debianotrs2112.0.4p01-12vulnerable
Debianotrs2112.0.4p01-13vulnerable
Debianotrs2112.0.4p01-14vulnerable
Debianotrs2112.0.4p01-14.1vulnerable
Debianotrs2112.0.4p01-15vulnerable
Debianotrs2112.0.4p01-16vulnerable
Debianotrs2112.0.4p01-17vulnerable
Debianotrs2112.0.4p01-18vulnerable
Debianotrs2112.0.4p01-6vulnerable
Debianotrs2112.0.4p01-7vulnerable
Debianotrs2112.0.4p01-8vulnerable
Debianotrs2112.0.4p01-9vulnerable
Debianotrs2112.0.99beta1-1vulnerable
Debianotrs2112.0.99beta1-2vulnerable
Debianotrs2112.1.1-1vulnerable
Debianotrs2112.1.3-1vulnerable
Debianotrs2112.1.4-1vulnerable
Debianotrs2112.1.4-2vulnerable
Debianotrs2112.1.5-1vulnerable
Debianotrs2112.1.5-2vulnerable
Debianotrs2112.1.5-3vulnerable
Debianotrs2112.1.6-1vulnerable
Debianotrs2112.1.7-1vulnerable
Debianotrs2112.1.7-2vulnerable
Debianotrs2112.2.0~beta2-1vulnerable
Debianotrs2112.2.0~beta3-1vulnerable
Debianotrs2112.2.1-1vulnerable
Debianotrs2112.2.2-1vulnerable
Debianotrs2112.2.3-1vulnerable
Debianotrs2112.2.4-1vulnerable
Debianotrs2112.2.5-1vulnerable
Debianotrs2112.2.5-2vulnerable
Debianotrs2112.2.6-1vulnerable
Debianotrs2112.2.7-1vulnerable
Debianotrs2112.2.7-2vulnerable
Debianotrs2112.2.7-2lenny1vulnerable
Debianotrs2112.2.7-2lenny2vulnerable
Debianotrs2112.2.7-2lenny3vulnerable
Debianotrs2112.2.7-3vulnerable
Debianotrs2112.3.2-1vulnerable
Debianotrs2112.3.2-2vulnerable
Debianotrs2112.3.3-1vulnerable
Debianotrs2112.3.4-1vulnerable
Debianotrs2112.3.4-2vulnerable
Debianotrs2112.3.4-3vulnerable
Debianotrs2112.3.4-4vulnerable
Debianotrs2112.3.4-5vulnerable
Debianotrs2112.3.4-6vulnerable
Debianotrs2112.3.4-7vulnerable
Debianotrs2112.4.10+dfsg1-1vulnerable
Debianotrs2112.4.10+dfsg1-2vulnerable
Debianotrs2112.4.10+dfsg1-3vulnerable
Debianotrs2112.4.5-1vulnerable
Debianotrs2112.4.5-2vulnerable
Debianotrs2112.4.5-3vulnerable
Debianotrs2112.4.5-4vulnerable
Debianotrs2112.4.5-5vulnerable
Debianotrs2112.4.6-1vulnerable
Debianotrs2112.4.6-2vulnerable
Debianotrs2112.4.7+dfsg1-1vulnerable
Debianotrs2112.4.7-1vulnerable
Debianotrs2112.4.7-2vulnerable
Debianotrs2112.4.7-3vulnerable
Debianotrs2112.4.7-4vulnerable
Debianotrs2112.4.7-5vulnerable
Debianotrs2112.4.7-6vulnerable
Debianotrs2112.4.8+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-1vulnerable
Debianotrs2112.4.9+dfsg1-2vulnerable
Debianotrs2112.4.9+dfsg1-3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze1vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze3vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze4vulnerable
Debianotrs2112.4.9+dfsg1-3+squeeze5vulnerable
Debianotrs2112.4.9+dfsg1-4vulnerable
Debianotrs2112.4.9+dfsg1-5vulnerable
Debianotrs2113.0.10+dfsg1-1vulnerable
Debianotrs2113.0.10+dfsg1-2vulnerable
Debianotrs2113.0.11+dfsg1-1vulnerable
Debianotrs2113.0.8+dfsg1-1vulnerable
Debianotrs2113.0.9+dfsg1-1vulnerable
Debianotrs2113.1.0~beta4+dfsg1-1vulnerable
Debianotrs2113.1.0~beta5+dfsg1-1vulnerable
Debianotrs2113.1.0~rc1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-1vulnerable
Debianotrs2113.1.1+dfsg1-2vulnerable
Debianotrs2113.1.10+dfsg1-1vulnerable
Debianotrs2113.1.11+dfsg1-1vulnerable
Debianotrs2113.1.12+dfsg1-1vulnerable
Debianotrs2113.1.12+dfsg1-2vulnerable
Debianotrs2113.1.12+dfsg1-3vulnerable
Debianotrs2113.1.2+dfsg1-1vulnerable
Debianotrs2113.1.2+dfsg1-2vulnerable
Debianotrs2113.1.2+dfsg1-3vulnerable
Debianotrs2113.1.3+dfsg1-1vulnerable
Debianotrs2113.1.3+dfsg1-2vulnerable
Debianotrs2113.1.4+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-1vulnerable
Debianotrs2113.1.5+dfsg1-2vulnerable
Debianotrs2113.1.5+dfsg1-3vulnerable
Debianotrs2113.1.6+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-1vulnerable
Debianotrs2113.1.7+dfsg1-2vulnerable
Debianotrs2113.1.7+dfsg1-3vulnerable
Debianotrs2113.1.7+dfsg1-4vulnerable
Debianotrs2113.1.7+dfsg1-5vulnerable
Debianotrs2113.1.7+dfsg1-6vulnerable
Debianotrs2113.1.7+dfsg1-7vulnerable
Debianotrs2113.1.7+dfsg1-8vulnerable
Debianotrs2113.1.8+dfsg1-1vulnerable
Debianotrs2113.1.9+dfsg1-1vulnerable
Debianotrs2113.2.1+dfsg1-1vulnerable
Debianotrs2113.2.10-1vulnerable
Debianotrs2113.2.10-2vulnerable
Debianotrs2113.2.11-1vulnerable
Debianotrs2113.2.11-1~bpo70+1vulnerable
Debianotrs2113.2.12-1vulnerable
Debianotrs2113.2.2+dfsg1-1vulnerable
Debianotrs2113.2.3+dfsg1-1vulnerable
Debianotrs2113.2.4-1vulnerable
Debianotrs2113.2.5-1vulnerable
Debianotrs2113.2.6-1vulnerable
Debianotrs2113.2.6-2vulnerable
Debianotrs2113.2.7-1vulnerable
Debianotrs2113.2.7-2vulnerable
Debianotrs2113.2.8-1vulnerable
Debianotrs2113.2.9-1vulnerable
Debianotrs2113.2.9-2vulnerable
Debianotrs2113.3.1-1vulnerable
Debianotrs2113.3.10-1vulnerable
Debianotrs2113.3.11-1vulnerable
Debianotrs2113.3.18-1~deb7u1vulnerable
Debianotrs2113.3.18-1~deb7u2vulnerable
Debianotrs2113.3.18-1~deb7u3vulnerable
Debianotrs2113.3.2-1vulnerable
Debianotrs2113.3.3-1vulnerable
Debianotrs2113.3.3-2vulnerable
Debianotrs2113.3.3-3vulnerable
Debianotrs2113.3.4-1vulnerable
Debianotrs2113.3.5-1vulnerable
Debianotrs2113.3.6-1vulnerable
Debianotrs2113.3.7-1vulnerable
Debianotrs2113.3.7-2vulnerable
Debianotrs2113.3.8-1vulnerable
Debianotrs2113.3.9-1vulnerable
Debianotrs2113.3.9-2vulnerable
Debianotrs2113.3.9-3vulnerable
Debianotrs2113.3.9-3~bpo70+1vulnerable
Debianotrs2114.0.10-1vulnerable
Debianotrs2114.0.11-1vulnerable
Debianotrs2114.0.12-1vulnerable
Debianotrs2114.0.13-1vulnerable
Debianotrs2114.0.13-1~bpo8+1vulnerable
Debianotrs2114.0.5-1vulnerable
Debianotrs2114.0.5-2vulnerable
Debianotrs2114.0.6-1vulnerable
Debianotrs2114.0.7-1vulnerable
Debianotrs2114.0.7-2vulnerable
Debianotrs2114.0.8-1vulnerable
Debianotrs2114.0.9-1vulnerable
Debianotrs2115.0.1-1vulnerable
Debianotrs2115.0.1-2vulnerable
Debianotrs2115.0.10-1vulnerable
Debianotrs2115.0.10-1~bpo8+1vulnerable
Debianotrs2115.0.11-1vulnerable
Debianotrs2115.0.12-1vulnerable
Debianotrs2115.0.13-1vulnerable
Debianotrs2115.0.13-1~bpo8+1vulnerable
Debianotrs2115.0.13-2vulnerable
Debianotrs2115.0.14-1vulnerable
Debianotrs2115.0.14-1~bpo8+1vulnerable
Debianotrs2115.0.15-1vulnerable
Debianotrs2115.0.16-1vulnerable
Debianotrs2115.0.16-1~bpo8+1vulnerable
Debianotrs2115.0.17-1vulnerable
Debianotrs2115.0.18-1vulnerable
Debianotrs2115.0.19-1vulnerable
Debianotrs2115.0.2-1vulnerable
Debianotrs2115.0.20-1vulnerable
Debianotrs2115.0.21-1vulnerable
Debianotrs2115.0.21-1~bpo9+1vulnerable
Debianotrs2115.0.22-1vulnerable
Debianotrs2115.0.23-1vulnerable
Debianotrs2115.0.23-1~bpo9+1vulnerable
Debianotrs2115.0.24-1vulnerable
Debianotrs2115.0.24-1~bpo9+1vulnerable
Debianotrs2115.0.3-1vulnerable
Debianotrs2115.0.5-1vulnerable
Debianotrs2115.0.6-1vulnerable
Debianotrs2115.0.6-1~bpo8+1vulnerable
Debianotrs2115.0.7-1vulnerable
Debianotrs2115.0.8+dfsg1-1vulnerable
Debianotrs2115.0.8-1vulnerable
Debianotrs2115.0.8-1~bpo8+1vulnerable
Debianotrs2115.0.9+dfsg1-1vulnerable
Debianotrs2115.0.9+repack1-1vulnerable
Debianotrs2116.0.1-1vulnerable
Debianotrs2116.0.10-1vulnerable
Debianotrs2116.0.11-1vulnerable
Debianotrs2116.0.11-1~bpo9+1vulnerable
Debianotrs2116.0.12-1vulnerable
Debianotrs2116.0.12-1~bpo9+1vulnerable
Debianotrs2116.0.13-1vulnerable
Debianotrs2116.0.14-1vulnerable
Debianotrs2116.0.15-1vulnerable
Debianotrs2116.0.16-1vulnerable
Debianotrs2116.0.16-2vulnerable
Debianotrs2116.0.17-1vulnerable
Debianotrs2116.0.2-1vulnerable
Debianotrs2116.0.3-1vulnerable
Debianotrs2116.0.4-1vulnerable
Debianotrs2116.0.5-1vulnerable
Debianotrs2116.0.6-1vulnerable
Debianotrs2116.0.7-1vulnerable
Debianotrs2116.0.8-1vulnerable
Debianotrs2116.0.8-1~bpo9+1vulnerable
Debianotrs2116.0.9-1vulnerable
Debianotrs2116.0.9-1~bpo9+1vulnerable
Debianotrs2116.0.18-1fixed
Debianotrs283.3.10-1vulnerable
Debianotrs283.3.11-1vulnerable
Debianotrs283.3.18-1+deb8u1vulnerable
Debianotrs283.3.18-1+deb8u2vulnerable
Debianotrs283.3.18-1+deb8u3vulnerable
Debianotrs283.3.18-1+deb8u4vulnerable
Debianotrs283.3.18-1+deb8u5vulnerable
Debianotrs283.3.18-1+deb8u6vulnerable
Debianotrs283.3.18-1+deb8u7vulnerable
Debianotrs283.3.18-1+deb8u8vulnerable
Debianotrs283.3.18-1~deb7u1vulnerable
Debianotrs283.3.18-1~deb7u2vulnerable
Debianotrs283.3.18-1~deb7u3vulnerable
Debianotrs283.3.9-3vulnerable
Debianotrs283.3.9-3+deb8u1vulnerable
Debianotrs283.3.18-1+deb8u9fixed
Ubuntuotrs216.044.0.10-1vulnerable
Ubuntuotrs216.045.0.1-1vulnerable
Ubuntuotrs216.045.0.1-2vulnerable
Ubuntuotrs216.045.0.2-1vulnerable
Ubuntuotrs216.045.0.3-1vulnerable
Ubuntuotrs216.045.0.5-1vulnerable
Ubuntuotrs216.045.0.6-1vulnerable
Ubuntuotrs216.045.0.7-1vulnerable
Ubuntuotrs218.045.0.23-1vulnerable
Ubuntuotrs218.045.0.24-1vulnerable
Ubuntuotrs218.046.0.1-1vulnerable
Ubuntuotrs218.046.0.2-1vulnerable
Ubuntuotrs218.046.0.3-1vulnerable
Ubuntuotrs218.046.0.4-1vulnerable
Ubuntuotrs218.046.0.5-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianotrs2deb116.0.18-1Not reportedDEBIAN-CVE-2019-9892Not reported
Debianotrs2deb83.3.18-1+deb8u9Not reportedDLA-1774-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]