Browse CVEs

HIGH 7.5 CVE-2016-4028 An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' crede… Ox Guard after 2.4.0 Fix from $1,9502016-12-15 MEDIUM 6.1 CVE-2016-4026 An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer component has an issue with filtering malicious conten… Open Xchange Appsuite after 7.8.1 Fix from $1,6002016-12-15 HIGH 7.4 CVE-2016-3174 An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet offers to redirect a client to a specified URL. Since som… Open Xchange Appsuite after 7.8.0 Fix from $1,9502016-12-15 MEDIUM 5.4 CVE-2016-3173 An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script … Open Xchange Appsuite after 7.8.0 Fix from $1,6002016-12-15 MEDIUM 6.1 CVE-2016-2840 An issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26. The "session" parameter for file-download requests can be used to … Open Xchange Appsuite after 7.8.0 Fix from $1,6002016-12-15 HIGH 8.8 CVE-2015-8542 An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific u… Ox Guard after 2.2.0 Fix from $1,9502016-12-15 MEDIUM 6.5 CVE-2014-7871 SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execut… Open Xchange Appsuite after 7.4.2 Fix from $1,6002014-11-21 HIGH 7.5 CVE-2013-5200 The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 … Open Xchange Appsuite No fix yet Fix from $1,9502013-09-25 MEDIUM 5.8 CVE-2013-1651 OXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 does not verify X.509 certificates from SSL server… Open Xchange Server No fix yet Fix from $1,6002013-09-05 MEDIUM 5.0 CVE-2013-1647 Multiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attacke… Open Xchange Server No fix yet Fix from $1,6002013-09-05 MEDIUM 5.0 CVE-2013-2582 CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6,… Open Xchange Appsuite Mitigation only Fix from $1,6002013-09-05 HIGH 7.5 CVE-2006-2738 The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for th… Open Xchange after 0.8.2 Fix from $1,9502006-06-01