Browse CVEs

MEDIUM 6.1 CVE-2021-31934 OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suit… Open Xchange Appsuite after 7.10.4 Fix from $1,6002021-04-30 MEDIUM 6.1 CVE-2021-31935 OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view. Open Xchange Appsuite after 7.10.4 Fix from $1,6002021-04-30 MEDIUM 6.1 CVE-2021-23936 OX App Suite through 7.10.4 allows XSS via the subject of a task. Open Xchange Appsuite after 7.10.4 Fix from $1,6002021-01-12 MEDIUM 6.4 CVE-2021-23927 OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request. Open Xchange Appsuite after 7.10.4 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2021-23928 OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string. Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2021-23929 OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=… Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2021-23930 OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile. Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2021-23931 OX App Suite through 7.10.4 allows XSS via an inline binary file. Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2021-23932 OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename. Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2021-23933 OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL. Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2021-23934 OX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code. Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2021-23935 OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code. Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 6.1 CVE-2020-24701EPSS 7% OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the /appsuite URI). Open Xchange Appsuite after 7.10.4 Fix from $1,6002021-01-12 MEDIUM 5.4 CVE-2020-24700 OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring. Open Xchange Appsuite after 7.10.3 Fix from $1,6002021-01-12 MEDIUM 5.0 CVE-2020-15002 OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API. Open Xchange Appsuite after 7.10.3 Fix from $1,6002020-10-23 CRITICAL 9.8 CVE-2020-12645 OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/loa… Open Xchange Appsuite after 7.10.3 Fix from $2,3002020-08-31 MEDIUM 5.4 CVE-2020-12646 OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document. Open Xchange Appsuite after 7.10.3 Fix from $1,6002020-08-31 MEDIUM 5.0 CVE-2020-12644 OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API. Open Xchange Appsuite after 7.10.3 Fix from $1,6002020-08-31 HIGH 7.5 CVE-2020-8543 OX App Suite through 7.10.3 has Improper Input Validation. Open Xchange Appsuite No fix yet Fix from $1,9502020-06-16 MEDIUM 6.5 CVE-2020-8541 OX App Suite through 7.10.3 allows XXE attacks. Open Xchange Appsuite No fix yet Fix from $1,6002020-06-16 MEDIUM 6.5 CVE-2020-8544 OX App Suite through 7.10.3 allows SSRF. Open Xchange Appsuite No fix yet Fix from $1,6002020-06-16 MEDIUM 5.4 CVE-2020-8542 OX App Suite through 7.10.3 allows XSS. Open Xchange Appsuite No fix yet Fix from $1,6002020-06-16 MEDIUM 6.1 CVE-2020-9426 OX Guard 2.10.3 and earlier allows XSS. Ox Guard No fix yet Fix from $1,6002020-06-15 MEDIUM 5.0 CVE-2020-9427 OX Guard 2.10.3 and earlier allows SSRF. Ox Guard No fix yet Fix from $1,6002020-06-15 MEDIUM 5.0 CVE-2019-18846 OX App Suite through 7.10.2 allows SSRF. Open Xchange Appsuite after 7.10.2 Fix from $1,6002020-02-21 HIGH 7.5 CVE-2014-5236 Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 a… Open Xchange Appsuite after 7.4.1 Fix from $1,9502020-01-31 HIGH 7.8 CVE-2014-5238 XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read … Open Xchange Appsuite after 7.4.1 Fix from $1,9502020-01-14 MEDIUM 6.6 CVE-2019-16716 OX App Suite through 7.10.2 has Incorrect Access Control. Open Xchange Appsuite after 7.10.2 Fix from $1,6002020-01-06 MEDIUM 6.1 CVE-2019-16717 OX App Suite through 7.10.2 has XSS. Open Xchange Appsuite after 7.10.2 Fix from $1,6002020-01-06 MEDIUM 6.1 CVE-2013-7485 Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows re… Open Xchange Appsuite No fix yet Fix from $1,6002020-01-02