CVE-2022-4427: Otrs

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in OTRS AG OTRS, OTRS AG ((OTRS)) Community Edition allows SQL Injection via TicketSearch Webservice This issue affects OTRS: from 7.0.1 before 7.0.40 Patch 1, from 8.0.1 before 8.0.28 Patch 1; ((OTRS)) Community Edition: from 6.0.1 through 6.0.34.

Affected products

• Otrs Otrs: from 6.0.1, up to and including 6.0.34; from 7.0.1, before 7.0.40 (fixed in 7.0.40); from 8.0.1, before 8.0.28 (fixed in 8.0.28); version 7.0.40 only; version 8.0.28 only

Published 2022-12-19. Last modified 2026-06-17.