Vulnerabilities > Zammad
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-10-07 | CVE-2021-42086 | Unspecified vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 8.8 |
| 2021-10-07 | CVE-2021-42087 | Unspecified vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 4.9 |
| 2021-10-07 | CVE-2021-42088 | Cross-site Scripting vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 6.1 |
| 2021-10-07 | CVE-2021-42089 | Information Exposure vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 7.5 |
| 2021-10-07 | CVE-2021-42090 | Deserialization of Untrusted Data vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 9.8 |
| 2021-10-07 | CVE-2021-42091 | Server-Side Request Forgery (SSRF) vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 9.1 |
| 2021-10-07 | CVE-2021-42092 | Cross-site Scripting vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 5.4 |
| 2021-10-07 | CVE-2021-42093 | Unspecified vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 7.2 |
| 2021-10-07 | CVE-2021-42094 | Command Injection vulnerability in Zammad An issue was discovered in Zammad before 4.1.1. | 9.8 |
| 2021-06-28 | CVE-2021-35298 | Cross-site Scripting vulnerability in Zammad Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via multiple models that contain a 'note' field to store additional information. | 6.1 |