Open-Xchange App Suite Cross-Site Scripting Vulnerability

Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange, a German company. A security vulnerability exists in Open-Xchange App Suite that originates from the ability to set an arbitrary "product name" for OX Guard, which could lead to a cross-site scripting...

CVE-2020-28944

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

CVE-2020-28944

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

Code injection

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

CVE-2020-28944

CVE-2020-28944 affects Open-Xchange/OX App Suite (OX Guard) prior to fixes. The connected packetstorm entry confirms vulnerable product/version: OX App Suite 7.10.4 and earlier with a Denial of Service via a WKS server that responds slowly or with large data volumes. The vulnerability affects the...

CVE-2020-28944

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

OX App Suite / OX Guard SSRF / DoS / Cross Site Scripting

Product: OX App Suite / OX Guard Vendor: OX Software GmbH Affected product: OX App Suite Internal reference: OXUIB-481 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.4 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendo...

Open-Xchange OX Guard Code Issue Vulnerability

Open-Xchange OX Guard is an encryption software from Open-Xchange USA. The software is mainly used for encryption/decryption of emails and documents. A code issue vulnerability exists in Open-Xchange OX Guard 2.10.3 and prior versions. The vulnerability arises from an improperly designed or...

Open-Xchange OX Guard Cross-Site Scripting Vulnerability (CNVD-2020-53118)

Open-Xchange OX Guard is an encryption software from Open-Xchange USA. The software is mainly used for encryption/decryption of emails and documents. A cross-site scripting vulnerability exists in Open-Xchange OX Guard 2.10.3 and earlier versions. The vulnerability stems from a lack of proper...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

Cross site scripting

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

Server side request forgery (ssrf)

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9426

Open-Xchange Open-Xchange OX Guard 2.10.3 and earlier is affected by a Cross-Site Scripting (XSS) vulnerability in the WEB application due to inadequate validation of client data. The issue allows execution of client-side code via manipulated input (e.g., forged public-keys) displayed in Guard se...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-9427

OX Guard 2.10.3 and earlier contains an SSRF vulnerability in the guard component. Affected product: Open-Xchange OX Guard (versions up to 2.10.3). Root cause: improper handling leading to Server-Side Request Forgery. Impact: as described in public advisories; exploit details are corroborated by ...