CVE-2019-9751 — An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5

Back Back to CVE browser

MEDIUM

An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5

Published Mar 13, 2019

4.8

MEDIUM

CVSS 3.0

EPSS 0.81%

Description

An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5. An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS. This is related to Kernel/Output/Template/Document.pm.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.81% 0.00812

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00812

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.81% (0.00812)	55.46th	v5 (v2026.06.15)
Sep 20, 2026	0.81% (0.00812)	55.44th	v5 (v2026.06.15)
Jul 20, 2024	0.08% (0.00077)	33.37th	v3 (v2023.03.01)
Apr 25, 2024	0.08% (0.00077)	31.94th	v3 (v2023.03.01)
Feb 8, 2024	0.08% (0.00082)	33.23th	v3 (v2023.03.01)
Mar 7, 2023	0.05% (0.00054)	19.64th	v3 (v2023.03.01)
Mar 6, 2023	1.09% (0.01086)	53.47th	v2 (v2022.01.01)
Apr 1, 2022	1.09% (0.01086)	49.83th	v2 (v2022.01.01)
Feb 4, 2022	6.65% (0.06652)	78.71th	v2 (v2022.01.01)
Feb 3, 2022	3.20% (0.03197)	66.46th	v1
Jan 6, 2022	3.20% (0.03197)	66.14th	v1
Jan 5, 2022	0.73% (0.00731)	50.76th	v5 (v2026.06.15)
Apr 14, 2021	0.73% (0.00731)	0.00th	v1