Browse CVEs

MEDIUM 5.4 CVE-2018-13104 OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID) Open Xchange Appsuite after 7.8.4 Fix from $1,6002019-03-21 MEDIUM 6.5 CVE-2018-12609 OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery. Open Xchange Appsuite after 7.8.4 Fix from $1,6002019-01-30 MEDIUM 6.1 CVE-2018-12611 OX App Suite 7.8.4 and earlier allows Directory Traversal. Open Xchange Appsuite after 7.8.4 Fix from $1,6002019-01-30 MEDIUM 5.3 CVE-2018-12610 OX App Suite 7.8.4 and earlier allows Information Exposure. Open Xchange Appsuite after 7.8.4 Fix from $1,6002019-01-30 MEDIUM 6.1 CVE-2017-6913 Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTM… Open Xchange Appsuite after 7.6.3 Fix from $1,6002018-09-18 MEDIUM 6.5 CVE-2018-9998 Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folder names i… Open Xchange Appsuite after 7.6.3 Fix from $1,6002018-07-05 MEDIUM 6.1 CVE-2018-9997 Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.… Open Xchange Appsuite after 7.6.3 Fix from $1,6002018-07-05 HIGH 8.8 CVE-2018-5752 The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev… Open Xchange Appsuite after 7.6.3 Fix from $1,9502018-06-16 MEDIUM 6.5 CVE-2018-5751EPSS 9% The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev… Open Xchange Appsuite after 7.6.3 Fix from $1,6002018-06-16 MEDIUM 6.5 CVE-2018-5753EPSS 8% The frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-re… Open Xchange Appsuite after 7.6.3 Fix from $1,6002018-06-16 MEDIUM 5.5 CVE-2018-5755EPSS 8% Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.x before 7.8.2-rev4, 7.8.3 be… Open Xchange Appsuite after 7.6.3 Fix from $1,6002018-06-16 MEDIUM 5.4 CVE-2018-5754 Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-rev9 allo… Open Xchange Appsuite after 7.8.3 Fix from $1,6002018-06-16 MEDIUM 6.5 CVE-2017-17062 The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev… Open Xchange Appsuite after 7.6.3 Fix from $1,6002018-06-16 MEDIUM 5.3 CVE-2014-2078 The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email addresses … Open Xchange Appsuite Mitigation only Fix from $1,6002018-04-10 MEDIUM 6.1 CVE-2015-1588 Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite before 7.4.2-rev43, 7.6.0-rev38, and 7.6.1-rev21. Open Xchange Appsuite after 7.4.2 Fix from $1,6002017-06-08 MEDIUM 6.1 CVE-2016-6846 Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59, 7.8.0 before 7.8.0-rev38, 7.8.2 before 7.8.2-rev8;… Documentconverter Api Mitigation only Fix from $1,6002017-03-29 MEDIUM 6.1 CVE-2016-6854 An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed … Ox Guard after 2.4.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6853 An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to external websites can be injected to the names of P… Ox Guard after 2.4.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6851 An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX Guard guest reader web applica… Ox Guard after 2.4.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6850 An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as profile pictures. In case their XML structure contai… Open Xchange Appsuite after 7.8.2 Fix from $1,6002016-12-15 MEDIUM 5.5 CVE-2016-6848 An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. API requests can be used to inject, generate and download executable files to… Open Xchange Appsuite after 7.8.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6847 An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as mp3 album covers. In case their XML structure contai… Open Xchange Appsuite after 7.8.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6845 An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly saniti… Open Xchange Appsuite after 7.8.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6844 An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browse… Open Xchange Appsuite after 7.8.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6843 An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code can be injected to contact names. When adding those contacts to a… Open Xchange Appsuite after 7.8.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-6842 An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Setting the user's name to JS code makes that code execute when selecting tha… Open Xchange Appsuite after 7.8.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-5740 An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical attachments within scheduling E-M… Open Xchange Appsuite after 7.8.2 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-5124 An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. Adding images from external sources to HTML editors by drag&drop can potenti… Open Xchange Appsuite after 7.8.1 Fix from $1,6002016-12-15 MEDIUM 5.8 CVE-2016-4046 An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access … Open Xchange Appsuite after 7.8.1 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-4045 An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using a URL notation. In case a use… Open Xchange Appsuite after 7.8.1 Fix from $1,6002016-12-15