Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2022-37311
HistoryDec 26, 2022 - 2:15 a.m.

CVE-2022-37311

2022-12-2602:15:09
CWE-1284
[email protected]
web.nvd.nist.gov
24
nvd
cve-2022-37311
ox app suite
uncontrolled resource consumption
security vulnerability

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

JSON

OX App Suite through 7.10.6 has Uncontrolled Resource Consumption via a large location request parameter to the redirect servlet.

Affected configurations

NVD
Node
open-xchangeopen-xchange_appsuiteRange<7.10.5
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5-
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5961
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5973
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5976
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5982
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5989
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_5994
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6000
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6003
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6008
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6010
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6016
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6020
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6026
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6029
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6034
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6035
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6038
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6046
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6051
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6053
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6060
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6061
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6066
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6068
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6072
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6079
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6084
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6092
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6101
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6111
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6120
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6132
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6137
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6140
OR
open-xchangeopen-xchange_appsuiteMatch7.10.5patch_release_6149
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6-
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6069
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6073
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6080
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6085
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6093
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6102
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6112
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6121
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6133
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6138
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6141
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6146
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6147
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6148
OR
open-xchangeopen-xchange_appsuiteMatch7.10.6patch_release_6150

Related

prion 1
cvelist 1
nvd 1
packetstorm 1
prion
prion
Design/Logic Flaw
2022-12-26 02:15:00
cvelist
cvelist
CVE-2022-37311
2022-12-26 00:00:00
nvd
nvd
CVE-2022-37311
2022-12-26 02:15:09
packetstorm
packetstorm
OX App Suite 7.10.6 Cross Site Scripting / SSRF / Resource Consumption
2022-11-30 00:00:00

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.4%

JSON
Related for CVE-2022-37311
prion1cvelist1nvd1packetstorm1