CVE-2022-35489: Zammad

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are assigned.

Affected products

• Zammad Zammad: version 5.2.0 only

Published 2022-08-08. Last modified 2026-06-17.