54 matches found
Cross site scripting
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 Bug ID...
CVE-2018-13103
OX App Suite 7.8.4 and earlier allows SSRF...
Open-Xchange (OX) App Suite XSS Vulnerability (56406)
Content of mails added to Portal are being executed as script code. This way malicious code within mails can get stored persistently. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Directory traversal
OX App Suite 7.8.4 and earlier allows Directory Traversal...
CVE-2018-12609
OX App Suite (Open-Xchange) 7.8.4 and earlier is affected by a server-side request forgery (SSRF) in the backend content handling. Exploitation could cause the server to fetch arbitrary resources. Remediation: upgrade to 7.8.4-rev34 or 7.8.3-rev49 (fixed versions).
Open-Xchange OX App Suite Cross Site Scripting / SSRF
Product: OX App Suite Vendor: OX Software GmbH Internal reference: 59653 Bug ID Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.0 Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.0-rev13 Vendor notification:...
Open-Xchange OX App Suite backend component information disclosure vulnerability
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. backend is one of the backend components. An information disclosure vulnerability exists in the backend component in...
Open-Xchange (OX) App Suite Multiple Vulnerabilities (58226, 58096)
Open-Xchange OX App Suite is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
Open-Xchange (OX) App Suite Multiple Vulnerabilities (58029, 58161)
Open-Xchange OX App Suite is prone to an information disclosure vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
Open-Xchange (OX) App Suite SSRF Vulnerability (58874)
Open-Xchange OX App Suite is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Open-Xchange (OX) App Suite Multiple Vulnerabilities (58282, 58256)
Open-Xchange OX App Suite is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
Open redirect
Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folder names in API error responses, which allows remote attackers to obtain sensitive information via the folder parameter in an "all" action to api/tasks...
Open-Xchange (OX) App Suite Content Spoofing Vulnerability (Jun 2018)
Open-Xchange OX App Suite is prone to a content spoofing vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...