dbcve.org
Vulnerability index

Browse CVEs

192 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-31934

OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suit…

Fix: after 7.10.4
Fix from $1,600 2021-04-30
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-31935

OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view.

Fix: after 7.10.4
Fix from $1,600 2021-04-30
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23936

OX App Suite through 7.10.4 allows XSS via the subject of a task.

Fix: after 7.10.4
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.4
CVE-2021-23927

OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request.

Fix: after 7.10.4
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23928

OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23929

OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=…

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23930

OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile.

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23931

OX App Suite through 7.10.4 allows XSS via an inline binary file.

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23932

OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename.

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23933

OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL.

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23934

OX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code.

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2021-23935

OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code.

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 6.1
CVE-2020-24701EPSS 7%

OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI).

Fix: after 7.10.4
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 5.4
CVE-2020-24700

OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring.

Fix: after 7.10.3
Fix from $1,600 2021-01-12
Open Xchange Appsuite MEDIUM 5.0
CVE-2020-15002

OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.

Fix: after 7.10.3
Fix from $1,600 2020-10-23
Open Xchange Appsuite CRITICAL 9.8
CVE-2020-12645

OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/loa…

Fix: after 7.10.3
Fix from $2,300 2020-08-31
Open Xchange Appsuite MEDIUM 5.4
CVE-2020-12646

OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.

Fix: after 7.10.3
Fix from $1,600 2020-08-31
Open Xchange Appsuite MEDIUM 5.0
CVE-2020-12644

OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API.

Fix: after 7.10.3
Fix from $1,600 2020-08-31
Open Xchange Appsuite HIGH 7.5
CVE-2020-8543

OX App Suite through 7.10.3 has Improper Input Validation.

No fix yet
Fix from $1,950 2020-06-16
Open Xchange Appsuite MEDIUM 6.5
CVE-2020-8541

OX App Suite through 7.10.3 allows XXE attacks.

No fix yet
Fix from $1,600 2020-06-16
Open Xchange Appsuite MEDIUM 6.5
CVE-2020-8544

OX App Suite through 7.10.3 allows SSRF.

No fix yet
Fix from $1,600 2020-06-16
Open Xchange Appsuite MEDIUM 5.4
CVE-2020-8542

OX App Suite through 7.10.3 allows XSS.

No fix yet
Fix from $1,600 2020-06-16
Ox Guard MEDIUM 6.1
CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS.

No fix yet
Fix from $1,600 2020-06-15
Ox Guard MEDIUM 5.0
CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF.

No fix yet
Fix from $1,600 2020-06-15
Open Xchange Appsuite MEDIUM 5.0
CVE-2019-18846

OX App Suite through 7.10.2 allows SSRF.

Fix: after 7.10.2
Fix from $1,600 2020-02-21
Open Xchange Appsuite HIGH 7.5
CVE-2014-5236

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 a…

Fix: after 7.4.1
Fix from $1,950 2020-01-31
Open Xchange Appsuite HIGH 7.8
CVE-2014-5238

XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read …

Fix: after 7.4.1
Fix from $1,950 2020-01-14
Open Xchange Appsuite MEDIUM 6.6
CVE-2019-16716

OX App Suite through 7.10.2 has Incorrect Access Control.

Fix: after 7.10.2
Fix from $1,600 2020-01-06
Open Xchange Appsuite MEDIUM 6.1
CVE-2019-16717

OX App Suite through 7.10.2 has XSS.

Fix: after 7.10.2
Fix from $1,600 2020-01-06
Open Xchange Appsuite MEDIUM 6.1
CVE-2013-7485

Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows re…

No fix yet
Fix from $1,600 2020-01-02