zammad kayıtları
zammad üreticisine ait 90 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %14,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12
- CWE-863 Incorrect Authorization8
- CWE-862 Missing Authorization7
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-918 Server-Side Request Forgery (SSRF)4
- CWE-284 Improper Access Control3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
90 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-42090İstismar yok | An issue was discovered in Zammad before 4.1.1.zammad · zammad · CWE-502 | Kritik9,8 | — | %2,3 | 7 Eki 2021 |
40Planlayın | CVE-2021-42094İstismar yok | An issue was discovered in Zammad before 4.1.1.zammad · zammad · CWE-77 | Kritik9,8 | — | %1,9 | 7 Eki 2021 |
39İzleyin | CVE-2017-5619İstismar yok | An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.zammad · zammad · CWE-287 | Kritik9,8 | — | %1,5 | 13 Mar 2017 |
39İzleyin | CVE-2020-26030İstismar yok | An issue was discovered in Zammad before 3.4.1.zammad · zammad · CWE-287 | Kritik9,8 | — | %1,4 | 28 Ara 2020 |
39İzleyin | CVE-2022-48021İstismar yok | A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.zammad · zammad | Kritik9,8 | — | %0,9 | 2 Şub 2023 |
39İzleyin | CVE-2022-35490İstismar yok | Zammad 5.2.0 is vulnerable to privilege escalation.zammad · zammad · CWE-307 | Kritik9,8 | — | %0,9 | 8 Ağu 2022 |
39İzleyin | CVE-2017-6080İstismar yok | An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involvizammad · zammad · CWE-352 | Kritik9,8 | — | %0,7 | 13 Mar 2017 |
36İzleyin | CVE-2022-27332İstismar yok | An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication.zammad · zammad · CWE-306 | Kritik9,1 | — | %1,1 | 26 Nis 2022 |
36İzleyin | CVE-2021-42091İstismar yok | An issue was discovered in Zammad before 4.1.1.zammad · zammad · CWE-918 | Kritik9,1 | — | %1,1 | 7 Eki 2021 |
36İzleyin | CVE-2024-33668İstismar yok | An issue was discovered in Zammad before 6.3.0.zammad · zammad · CWE-639 | Kritik9,1 | — | %0,4 | 25 Nis 2024 |
35İzleyin | CVE-2021-42086İstismar yok | An issue was discovered in Zammad before 4.1.1.zammad · zammad | Yüksek8,8 | — | %1,1 | 7 Eki 2021 |
35İzleyin | CVE-2017-6081İstismar yok | A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.zammad · zammad · CWE-352 | Yüksek8,8 | — | %0,6 | 13 Mar 2017 |
35İzleyin | CVE-2025-32359İstismar yok | In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.zammad · zammad · CWE-602 | Yüksek8,8 | — | %0,3 | 5 Nis 2025 |
34İzleyin | CVE-2026-34723İstismar yok | Zammad has incorrect access control in getting_started_controllerzammad · zammad · CWE-284 | Yüksek8,7 | — | %0,5 | 8 Nis 2026 |
34İzleyin | CVE-2024-33666İstismar yok | An issue was discovered in Zammad before 6.3.0.zammad · zammad · CWE-284 | Yüksek8,6 | — | %0,5 | 25 Nis 2024 |
34İzleyin | CVE-2026-34724Kavram kanıtı | Zammad has a server-side template injection leading to RCE via AI Agentzammad · zammad · CWE-94 | Yüksek8,7 | — | %0,5 | 8 Nis 2026 |
33İzleyin | CVE-2026-34719İstismar yok | Zammad has a Server-side request forgery (SSRF) via webhookszammad · zammad · CWE-918 | Yüksek8,3 | — | %0,3 | 8 Nis 2026 |
32İzleyin | CVE-2021-43145İstismar yok | With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.zammad · zammad | Yüksek8,1 | — | %1,0 | 4 Şub 2022 |
32İzleyin | CVE-2025-32360İstismar yok | In Zammad 6.4.x before 6.4.2, there is information exposure.zammad · zammad · CWE-402 | Yüksek8,1 | — | %0,2 | 5 Nis 2025 |
30İzleyin | CVE-2020-10096İstismar yok | An issue was discovered in Zammad 3.0 through 3.2.zammad · zammad · CWE-200 | Yüksek7,5 | — | %1,1 | 4 Mar 2020 |
30İzleyin | CVE-2021-35299İstismar yok | Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration prozammad · zammad · CWE-532 | Yüksek7,5 | — | %1,1 | 28 Haz 2021 |
30İzleyin | CVE-2021-42089İstismar yok | An issue was discovered in Zammad before 4.1.1.zammad · zammad · CWE-200 | Yüksek7,5 | — | %1,1 | 7 Eki 2021 |
30İzleyin | CVE-2020-10101İstismar yok | An issue was discovered in Zammad 3.0 through 3.2.zammad · zammad · CWE-20 | Yüksek7,5 | — | %1,1 | 4 Mar 2020 |
30İzleyin | CVE-2020-26032İstismar yok | An SSRF issue was discovered in Zammad before 3.4.1.zammad · zammad · CWE-918 | Yüksek7,5 | — | %1,1 | 28 Ara 2020 |
30İzleyin | CVE-2022-29701İstismar yok | A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests forzammad · zammad · CWE-770 | Yüksek7,5 | — | %1,0 | 26 Nis 2022 |
- CVE-2021-4209040Planlayın
An issue was discovered in Zammad before 4.1.1.
KritikCVSS 9,8İstismar yokEPSS %2zammad · zammad7 Eki 2021
- CVE-2021-4209440Planlayın
An issue was discovered in Zammad before 4.1.1.
KritikCVSS 9,8İstismar yokEPSS %2zammad · zammad7 Eki 2021
- CVE-2017-561939İzleyin
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.
KritikCVSS 9,8İstismar yokEPSS %2zammad · zammad13 Mar 2017
- CVE-2020-2603039İzleyin
An issue was discovered in Zammad before 3.4.1.
KritikCVSS 9,8İstismar yokEPSS %1zammad · zammad28 Ara 2020
- CVE-2022-4802139İzleyin
A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.
KritikCVSS 9,8İstismar yokEPSS %1zammad · zammad2 Şub 2023
- CVE-2022-3549039İzleyin
Zammad 5.2.0 is vulnerable to privilege escalation.
KritikCVSS 9,8İstismar yokEPSS %1zammad · zammad8 Ağu 2022
- CVE-2017-608039İzleyin
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involvi
KritikCVSS 9,8İstismar yokEPSS %1zammad · zammad13 Mar 2017
- CVE-2022-2733236İzleyin
An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication.
KritikCVSS 9,1İstismar yokEPSS %1zammad · zammad26 Nis 2022
- CVE-2021-4209136İzleyin
An issue was discovered in Zammad before 4.1.1.
KritikCVSS 9,1İstismar yokEPSS %1zammad · zammad7 Eki 2021
- CVE-2024-3366836İzleyin
An issue was discovered in Zammad before 6.3.0.
KritikCVSS 9,1İstismar yokEPSS %0zammad · zammad25 Nis 2024
- CVE-2021-4208635İzleyin
An issue was discovered in Zammad before 4.1.1.
YüksekCVSS 8,8İstismar yokEPSS %1zammad · zammad7 Eki 2021
- CVE-2017-608135İzleyin
A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.
YüksekCVSS 8,8İstismar yokEPSS %1zammad · zammad13 Mar 2017
- CVE-2025-3235935İzleyin
In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.
YüksekCVSS 8,8İstismar yokEPSS %0zammad · zammad5 Nis 2025
- CVE-2026-3472334İzleyin
Zammad has incorrect access control in getting_started_controller
YüksekCVSS 8,7İstismar yokEPSS %1zammad · zammad8 Nis 2026
- CVE-2024-3366634İzleyin
An issue was discovered in Zammad before 6.3.0.
YüksekCVSS 8,6İstismar yokEPSS %1zammad · zammad25 Nis 2024
- CVE-2026-3472434İzleyin
Zammad has a server-side template injection leading to RCE via AI Agent
YüksekCVSS 8,7Kavram kanıtıEPSS %0zammad · zammad8 Nis 2026
- CVE-2026-3471933İzleyin
Zammad has a Server-side request forgery (SSRF) via webhooks
YüksekCVSS 8,3İstismar yokEPSS %0zammad · zammad8 Nis 2026
- CVE-2021-4314532İzleyin
With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.
YüksekCVSS 8,1İstismar yokEPSS %1zammad · zammad4 Şub 2022
- CVE-2025-3236032İzleyin
In Zammad 6.4.x before 6.4.2, there is information exposure.
YüksekCVSS 8,1İstismar yokEPSS %0zammad · zammad5 Nis 2025
- CVE-2020-1009630İzleyin
An issue was discovered in Zammad 3.0 through 3.2.
YüksekCVSS 7,5İstismar yokEPSS %1zammad · zammad4 Mar 2020
- CVE-2021-3529930İzleyin
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration pro
YüksekCVSS 7,5İstismar yokEPSS %1zammad · zammad28 Haz 2021
- CVE-2021-4208930İzleyin
An issue was discovered in Zammad before 4.1.1.
YüksekCVSS 7,5İstismar yokEPSS %1zammad · zammad7 Eki 2021
- CVE-2020-1010130İzleyin
An issue was discovered in Zammad 3.0 through 3.2.
YüksekCVSS 7,5İstismar yokEPSS %1zammad · zammad4 Mar 2020
- CVE-2020-2603230İzleyin
An SSRF issue was discovered in Zammad before 3.4.1.
YüksekCVSS 7,5İstismar yokEPSS %1zammad · zammad28 Ara 2020
- CVE-2022-2970130İzleyin
A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for
YüksekCVSS 7,5İstismar yokEPSS %1zammad · zammad26 Nis 2022