Vulnerabilities > Zammad

DATE CVE VULNERABILITY TITLE RISK
2020-12-28 CVE-2020-29159 Unspecified vulnerability in Zammad
An issue was discovered in Zammad before 3.5.1.
network
low complexity
zammad
4.0
2020-12-28 CVE-2020-29158 Incorrect Authorization vulnerability in Zammad
An issue was discovered in Zammad before 3.5.1.
network
low complexity
zammad CWE-863
4.0
2020-12-28 CVE-2020-26035 Cross-site Scripting vulnerability in Zammad
An issue was discovered in Zammad before 3.4.1.
network
zammad CWE-79
3.5
2020-12-28 CVE-2020-26034 Unspecified vulnerability in Zammad
An account-enumeration issue was discovered in Zammad before 3.4.1.
network
low complexity
zammad
4.0
2020-12-28 CVE-2020-26033 Cross-Site Request Forgery (CSRF) vulnerability in Zammad
An issue was discovered in Zammad before 3.4.1.
network
zammad CWE-352
5.8
2020-12-28 CVE-2020-26032 Server-Side Request Forgery (SSRF) vulnerability in Zammad
An SSRF issue was discovered in Zammad before 3.4.1.
network
low complexity
zammad CWE-918
5.0
2020-12-28 CVE-2020-26031 Incorrect Default Permissions vulnerability in Zammad
An issue was discovered in Zammad before 3.4.1.
network
low complexity
zammad CWE-276
4.0
2020-12-28 CVE-2020-26030 Improper Authentication vulnerability in Zammad
An issue was discovered in Zammad before 3.4.1.
network
low complexity
zammad CWE-287
7.5
2020-12-28 CVE-2020-26029 Incorrect Authorization vulnerability in Zammad
An issue was discovered in Zammad before 3.4.1.
network
low complexity
zammad CWE-863
4.0
2020-12-28 CVE-2020-26028 Incorrect Authorization vulnerability in Zammad
An issue was discovered in Zammad before 3.4.1.
network
low complexity
zammad CWE-863
4.0