Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-10098

An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Email functionality. The malicious JavaScript will execute within the browser of any user who opens the Ticket with the Article created from that Email.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.0%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
Products affected by CVE-2020-10098
  • Zammad » Zammad » Version: 1.0.0
    cpe:2.3:a:zammad:zammad:1.0.0
  • Zammad » Zammad » Version: 1.0.1
    cpe:2.3:a:zammad:zammad:1.0.1
  • Zammad » Zammad » Version: 1.0.2
    cpe:2.3:a:zammad:zammad:1.0.2
  • Zammad » Zammad » Version: 1.0.3
    cpe:2.3:a:zammad:zammad:1.0.3
  • Zammad » Zammad » Version: 1.0.4
    cpe:2.3:a:zammad:zammad:1.0.4
  • Zammad » Zammad » Version: 1.1.0
    cpe:2.3:a:zammad:zammad:1.1.0
  • Zammad » Zammad » Version: 1.1.1
    cpe:2.3:a:zammad:zammad:1.1.1
  • Zammad » Zammad » Version: 1.1.2
    cpe:2.3:a:zammad:zammad:1.1.2
  • Zammad » Zammad » Version: 1.1.3
    cpe:2.3:a:zammad:zammad:1.1.3
  • Zammad » Zammad » Version: 1.1.4
    cpe:2.3:a:zammad:zammad:1.1.4
  • Zammad » Zammad » Version: 1.2.0
    cpe:2.3:a:zammad:zammad:1.2.0
  • Zammad » Zammad » Version: 1.2.1
    cpe:2.3:a:zammad:zammad:1.2.1
  • Zammad » Zammad » Version: 1.2.2
    cpe:2.3:a:zammad:zammad:1.2.2
  • Zammad » Zammad » Version: 1.2.3
    cpe:2.3:a:zammad:zammad:1.2.3
  • Zammad » Zammad » Version: 1.3.0
    cpe:2.3:a:zammad:zammad:1.3.0
  • Zammad » Zammad » Version: 1.3.1
    cpe:2.3:a:zammad:zammad:1.3.1
  • Zammad » Zammad » Version: 1.3.2
    cpe:2.3:a:zammad:zammad:1.3.2
  • Zammad » Zammad » Version: 1.4.0
    cpe:2.3:a:zammad:zammad:1.4.0
  • Zammad » Zammad » Version: 1.4.1
    cpe:2.3:a:zammad:zammad:1.4.1
  • Zammad » Zammad » Version: 1.5.0
    cpe:2.3:a:zammad:zammad:1.5.0
  • Zammad » Zammad » Version: 1.5.1
    cpe:2.3:a:zammad:zammad:1.5.1
  • Zammad » Zammad » Version: 1.6.0
    cpe:2.3:a:zammad:zammad:1.6.0
  • Zammad » Zammad » Version: 1.6.1
    cpe:2.3:a:zammad:zammad:1.6.1
  • Zammad » Zammad » Version: 2.0.0
    cpe:2.3:a:zammad:zammad:2.0.0
  • Zammad » Zammad » Version: 2.0.1
    cpe:2.3:a:zammad:zammad:2.0.1
  • Zammad » Zammad » Version: 2.1.0
    cpe:2.3:a:zammad:zammad:2.1.0
  • Zammad » Zammad » Version: 2.1.1
    cpe:2.3:a:zammad:zammad:2.1.1
  • Zammad » Zammad » Version: 2.1.2
    cpe:2.3:a:zammad:zammad:2.1.2
  • Zammad » Zammad » Version: 2.10.0
    cpe:2.3:a:zammad:zammad:2.10.0
  • Zammad » Zammad » Version: 2.2.0
    cpe:2.3:a:zammad:zammad:2.2.0
  • Zammad » Zammad » Version: 2.2.1
    cpe:2.3:a:zammad:zammad:2.2.1
  • Zammad » Zammad » Version: 2.2.2
    cpe:2.3:a:zammad:zammad:2.2.2
  • Zammad » Zammad » Version: 2.3.0
    cpe:2.3:a:zammad:zammad:2.3.0
  • Zammad » Zammad » Version: 2.3.1
    cpe:2.3:a:zammad:zammad:2.3.1
  • Zammad » Zammad » Version: 2.4.0
    cpe:2.3:a:zammad:zammad:2.4.0
  • Zammad » Zammad » Version: 2.4.1
    cpe:2.3:a:zammad:zammad:2.4.1
  • Zammad » Zammad » Version: 2.5.0
    cpe:2.3:a:zammad:zammad:2.5.0
  • Zammad » Zammad » Version: 2.5.1
    cpe:2.3:a:zammad:zammad:2.5.1
  • Zammad » Zammad » Version: 2.6.0
    cpe:2.3:a:zammad:zammad:2.6.0
  • Zammad » Zammad » Version: 2.6.1
    cpe:2.3:a:zammad:zammad:2.6.1
  • Zammad » Zammad » Version: 2.7.0
    cpe:2.3:a:zammad:zammad:2.7.0
  • Zammad » Zammad » Version: 2.7.1
    cpe:2.3:a:zammad:zammad:2.7.1
  • Zammad » Zammad » Version: 2.7.2
    cpe:2.3:a:zammad:zammad:2.7.2
  • Zammad » Zammad » Version: 2.8.0
    cpe:2.3:a:zammad:zammad:2.8.0
  • Zammad » Zammad » Version: 2.8.1
    cpe:2.3:a:zammad:zammad:2.8.1
  • Zammad » Zammad » Version: 2.9.0
    cpe:2.3:a:zammad:zammad:2.9.0
  • Zammad » Zammad » Version: 3.0.0
    cpe:2.3:a:zammad:zammad:3.0.0
  • Zammad » Zammad » Version: 3.0.1
    cpe:2.3:a:zammad:zammad:3.0.1
  • Zammad » Zammad » Version: 3.1.0
    cpe:2.3:a:zammad:zammad:3.1.0
  • Zammad » Zammad » Version: 3.1.1
    cpe:2.3:a:zammad:zammad:3.1.1
  • Zammad » Zammad » Version: 3.2.0
    cpe:2.3:a:zammad:zammad:3.2.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved