CyberSecBulletin

Zimmad vulnerabilities

We track 1 vulnerability in Zimmad products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 26, 2024.

1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score

Latest Zimmad vulnerabilities

  • 8.6 High severity

    Zimmad: Improper Access Control

    CVE-2024-33666Zimmad

    An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents.