Xxe

2020-01-1416:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.8%

JSON

XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document.

CPENameOperatorVersion
open-xchange_appsuitele7.4.1
open-xchange_appsuiteeq7.6.0
open-xchange_appsuiteeq7.4.2
open-xchange_appsuiteeq7.6.0 revision2
open-xchange_appsuiteeq7.6.0 revision3
open-xchange_appsuiteeq7.6.0 revision4
open-xchange_appsuiteeq7.6.0 revision5
open-xchange_appsuiteeq7.6.0 revision6
open-xchange_appsuiteeq7.6.0 revision7
open-xchange_appsuiteeq7.6.0 revision8

Name	Operator	Version
open-xchange_appsuite	le	7.4.1
open-xchange_appsuite	eq	7.6.0
open-xchange_appsuite	eq	7.4.2
open-xchange_appsuite	eq	7.6.0 revision2
open-xchange_appsuite	eq	7.6.0 revision3
open-xchange_appsuite	eq	7.6.0 revision4
open-xchange_appsuite	eq	7.6.0 revision5
open-xchange_appsuite	eq	7.6.0 revision6
open-xchange_appsuite	eq	7.6.0 revision7
open-xchange_appsuite	eq	7.6.0 revision8