zammad kayıtları

zammad üreticisine ait 90 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 5
Düzeltme kaydı olan: %14,4
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

90 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2021-42090İstismar yok	An issue was discovered in Zammad before 4.1.1.zammad · zammad · CWE-502 pre-auth RCE Deserializasyon	Kritik9,8	—	%2,3	7 Eki 2021
40Planlayın	CVE-2021-42094İstismar yok	An issue was discovered in Zammad before 4.1.1.zammad · zammad · CWE-77 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%1,9	7 Eki 2021
39İzleyin	CVE-2017-5619İstismar yok	An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.zammad · zammad · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%1,5	13 Mar 2017
39İzleyin	CVE-2020-26030İstismar yok	An issue was discovered in Zammad before 3.4.1.zammad · zammad · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%1,4	28 Ara 2020
39İzleyin	CVE-2022-48021İstismar yok	A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.zammad · zammad pre-auth RCE	Kritik9,8	—	%0,9	2 Şub 2023
39İzleyin	CVE-2022-35490İstismar yok	Zammad 5.2.0 is vulnerable to privilege escalation.zammad · zammad · CWE-307 Kimlik doğrulamasız	Kritik9,8	—	%0,9	8 Ağu 2022
39İzleyin	CVE-2017-6080İstismar yok	An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involvizammad · zammad · CWE-352 Kimlik doğrulamasız CSRF	Kritik9,8	—	%0,7	13 Mar 2017
36İzleyin	CVE-2022-27332İstismar yok	An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication.zammad · zammad · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,1	—	%1,1	26 Nis 2022
36İzleyin	CVE-2021-42091İstismar yok	An issue was discovered in Zammad before 4.1.1.zammad · zammad · CWE-918 Kimlik doğrulamasız SSRF	Kritik9,1	—	%1,1	7 Eki 2021
36İzleyin	CVE-2024-33668İstismar yok	An issue was discovered in Zammad before 6.3.0.zammad · zammad · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,1	—	%0,4	25 Nis 2024
35İzleyin	CVE-2021-42086İstismar yok	An issue was discovered in Zammad before 4.1.1.zammad · zammad	Yüksek8,8	—	%1,1	7 Eki 2021
35İzleyin	CVE-2017-6081İstismar yok	A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.zammad · zammad · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,6	13 Mar 2017
35İzleyin	CVE-2025-32359İstismar yok	In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.zammad · zammad · CWE-602	Yüksek8,8	—	%0,3	5 Nis 2025
34İzleyin	CVE-2026-34723İstismar yok	Zammad has incorrect access control in getting_started_controllerzammad · zammad · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,7	—	%0,5	8 Nis 2026
34İzleyin	CVE-2024-33666İstismar yok	An issue was discovered in Zammad before 6.3.0.zammad · zammad · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek8,6	—	%0,5	25 Nis 2024
34İzleyin	CVE-2026-34724Kavram kanıtı	Zammad has a server-side template injection leading to RCE via AI Agentzammad · zammad · CWE-94 RCE SSTI	Yüksek8,7	—	%0,5	8 Nis 2026
33İzleyin	CVE-2026-34719İstismar yok	Zammad has a Server-side request forgery (SSRF) via webhookszammad · zammad · CWE-918 SSRF	Yüksek8,3	—	%0,3	8 Nis 2026
32İzleyin	CVE-2021-43145İstismar yok	With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.zammad · zammad	Yüksek8,1	—	%1,0	4 Şub 2022
32İzleyin	CVE-2025-32360İstismar yok	In Zammad 6.4.x before 6.4.2, there is information exposure.zammad · zammad · CWE-402	Yüksek8,1	—	%0,2	5 Nis 2025
30İzleyin	CVE-2020-10096İstismar yok	An issue was discovered in Zammad 3.0 through 3.2.zammad · zammad · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%1,1	4 Mar 2020
30İzleyin	CVE-2021-35299İstismar yok	Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration prozammad · zammad · CWE-532 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%1,1	28 Haz 2021
30İzleyin	CVE-2021-42089İstismar yok	An issue was discovered in Zammad before 4.1.1.zammad · zammad · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Yüksek7,5	—	%1,1	7 Eki 2021
30İzleyin	CVE-2020-10101İstismar yok	An issue was discovered in Zammad 3.0 through 3.2.zammad · zammad · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,1	4 Mar 2020
30İzleyin	CVE-2020-26032İstismar yok	An SSRF issue was discovered in Zammad before 3.4.1.zammad · zammad · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,5	—	%1,1	28 Ara 2020
30İzleyin	CVE-2022-29701İstismar yok	A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests forzammad · zammad · CWE-770 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%1,0	26 Nis 2022

CVE-2021-42090
40Planlayın
An issue was discovered in Zammad before 4.1.1.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Deserializasyon
zammad · zammad7 Eki 2021
CVE-2021-42094
40Planlayın
An issue was discovered in Zammad before 4.1.1.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Komut enjeksiyonu
zammad · zammad7 Eki 2021
CVE-2017-5619
39İzleyin
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
zammad · zammad13 Mar 2017
CVE-2020-26030
39İzleyin
An issue was discovered in Zammad before 3.4.1.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
zammad · zammad28 Ara 2020
CVE-2022-48021
39İzleyin
A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
zammad · zammad2 Şub 2023
CVE-2022-35490
39İzleyin
Zammad 5.2.0 is vulnerable to privilege escalation.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
zammad · zammad8 Ağu 2022
CVE-2017-6080
39İzleyin
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involvi
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
zammad · zammad13 Mar 2017
CVE-2022-27332
36İzleyin
An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication.
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
zammad · zammad26 Nis 2022
CVE-2021-42091
36İzleyin
An issue was discovered in Zammad before 4.1.1.
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- SSRF
zammad · zammad7 Eki 2021
CVE-2024-33668
36İzleyin
An issue was discovered in Zammad before 6.3.0.
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
zammad · zammad25 Nis 2024
CVE-2021-42086
35İzleyin
An issue was discovered in Zammad before 4.1.1.
YüksekCVSS 8,8İstismar yokEPSS %1
zammad · zammad7 Eki 2021
CVE-2017-6081
35İzleyin
A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1.
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
zammad · zammad13 Mar 2017
CVE-2025-32359
35İzleyin
In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.
YüksekCVSS 8,8İstismar yokEPSS %0
zammad · zammad5 Nis 2025
CVE-2026-34723
34İzleyin
Zammad has incorrect access control in getting_started_controller
YüksekCVSS 8,7İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
zammad · zammad8 Nis 2026
CVE-2024-33666
34İzleyin
An issue was discovered in Zammad before 6.3.0.
YüksekCVSS 8,6İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
zammad · zammad25 Nis 2024
CVE-2026-34724
34İzleyin
Zammad has a server-side template injection leading to RCE via AI Agent
YüksekCVSS 8,7Kavram kanıtıEPSS %0
- RCE
- SSTI
zammad · zammad8 Nis 2026
CVE-2026-34719
33İzleyin
Zammad has a Server-side request forgery (SSRF) via webhooks
YüksekCVSS 8,3İstismar yokEPSS %0
- SSRF
zammad · zammad8 Nis 2026
CVE-2021-43145
32İzleyin
With certain LDAP configurations, Zammad 5.0.1 was found to be vulnerable to unauthorized access with existing user accounts.
YüksekCVSS 8,1İstismar yokEPSS %1
zammad · zammad4 Şub 2022
CVE-2025-32360
32İzleyin
In Zammad 6.4.x before 6.4.2, there is information exposure.
YüksekCVSS 8,1İstismar yokEPSS %0
zammad · zammad5 Nis 2025
CVE-2020-10096
30İzleyin
An issue was discovered in Zammad 3.0 through 3.2.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
zammad · zammad4 Mar 2020
CVE-2021-35299
30İzleyin
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration pro
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
zammad · zammad28 Haz 2021
CVE-2021-42089
30İzleyin
An issue was discovered in Zammad before 4.1.1.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bilgi sızıntısı
zammad · zammad7 Eki 2021
CVE-2020-10101
30İzleyin
An issue was discovered in Zammad 3.0 through 3.2.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
zammad · zammad4 Mar 2020
CVE-2020-26032
30İzleyin
An SSRF issue was discovered in Zammad before 3.4.1.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SSRF
zammad · zammad28 Ara 2020
CVE-2022-29701
30İzleyin
A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Hizmet dışı bırakma
zammad · zammad26 Nis 2022