CVE-2010-2080

no score yetEPSS 1.5%

otrs otrs: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) 2.3.x before 2.3.6 and 2.4.x before 2.4.8 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2010-09-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

otrs:otrs

References

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00006.html
http://otrs.org/advisory/OSA-2010-02-en/
http://secunia.com/advisories/41381
http://security-tracker.debian.org/tracker/CVE-2010-2080
http://www.securityfocus.com/bid/43264

Check your stack JSON