CVE-2018-9998

🗓️ 05 Jul 2018 20:29:00Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 16 Views

Open-Xchange OX App Suite version before 7.8.4-rev28 allows remote attackers to obtain sensitive information via the folder parameter in API error response

Reporter	Title	Published	Views	Family All 7
0day.today	OX App Suite 7.8.4 XSS / XML Injection / Information Disclosure Vulnerabilities	3 Jul 201800:00	–	zdt
CVE	CVE-2018-9998	5 Jul 201820:00	–	cve
Cvelist	CVE-2018-9998	5 Jul 201820:00	–	cvelist
EUVD	EUVD-2018-21590	7 Oct 202500:30	–	euvd
OpenVAS	Open-Xchange (OX) App Suite Multiple Vulnerabilities (Jul 2018)	3 Jul 201800:00	–	openvas
Packet Storm	OX App Suite 7.8.4 XSS / XML Injection / Information Disclosure	2 Jul 201800:00	–	packetstorm
Prion	Open redirect	5 Jul 201820:29	–	prion

NVD

Node

open-xchange open-xchange_appsuiteRange≤7.6.3

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev14

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev15

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev16

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev17

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev18

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev20

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev22

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev23

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev24

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev25

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev26

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev28

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev29

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev30

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev31

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev32

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev33

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev35

OR

open-xchange open-xchange_appsuiteMatch7.6.3rev36

OR

open-xchange open-xchange_appsuiteMatch7.8.0

OR

open-xchange open-xchange_appsuiteMatch7.8.2

OR

open-xchange open-xchange_appsuiteMatch7.8.3

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev10

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev11

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev12

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev13

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev14

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev15

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev16

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev17

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev18

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev19

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev20

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev21

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev22

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev23

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev24

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev25

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev26

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev27

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev28

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev29

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev30

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev31

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev32

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev33

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev34

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev35

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev36

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev38

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev39

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev40

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev41

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev42

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev43

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev44

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev45

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev46

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev47

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev5

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev6

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev8

OR

open-xchange open-xchange_appsuiteMatch7.8.3rev9

OR

open-xchange open-xchange_appsuiteMatch7.8.4

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev10

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev11

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev13

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev14

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev15

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev16

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev17

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev18

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev19

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev20

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev21

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev22

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev23

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev24

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev25

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev26

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev27

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev3

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev4

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev5

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev6

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev7

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev8

OR

open-xchange open-xchange_appsuiteMatch7.8.4rev9

Source	Link
securitytracker	www.securitytracker.com/id/1041213
seclists	www.seclists.org/fulldisclosure/2018/Jul/12

21 Nov 2024 04:16Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24

CVSS 36.5

EPSS0.00376

open-xchange ox app suite information disclosure api vulnerability remote attackers sensitive information