Open-Xchange OX Guard Security Bypass Vulnerability

Open-Xchange OX Guard is a suite of security protection software for e-mail and files from Open-Xchange USA. A security bypass vulnerability exists in versions 2.0 and 2.2.0 of Open-Xchange OX Guard, which can be exploited by attackers to bypass security restrictions and perform unauthorized...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-04409)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX AppSuite 7.8.1 and earlier...

Open-Xchange AppSuite Information Disclosure Vulnerability (CNVD-2016-04412)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. An information disclosure vulnerability exists in OX AppSuite 7.8.1 and earlier...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-04414)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX AppSuite 7.8.1 and earlier...

Open-Xchange Guard Information Disclosure Vulnerability

Open-Xchange Guard OX Guard is a suite of security protection software for e-mail and files from Open-Xchange, Inc. in the United States. An information disclosure vulnerability exists in OX Guard version 2.4.0, which originates when the program returns a different error code. A remote attacker...

Open-Xchange AppSuite Information Disclosure Vulnerability (CNVD-2016-04299)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. An information disclosure vulnerability exists in OX AppSuite 7.8.1 and prior...

Open-Xchange App Suite 7.8.1 Information Disclosure

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 45328 Bug ID Vulnerability type: Information Exposure CWE-200 Vulnerable version: 7.8.1 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.6.2-rev43,...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-03678)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange AppSuite 7.8.0 and...

Open-Xchange AppSuite Open Redirect Vulnerability

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. An open redirection vulnerability exists in Open-Xchange AppSuite version 7.8.0 and...

Open-Xchange OX AppSuite 7.8.0 XSS / Open Redirect

Product: OX AppSuite Vendor: Open-Xchange GmbH Internal reference: 44542 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.8.0 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed versions: 7.6.2-rev40, 7.6.3-rev...

Open-Xchange: DIrectory Listing Found

Due to improper configuration , the following directory is open and the files are listed. URL : http://xi.dovecot.fi/debian...

Open-Xchange: nginx server vulnerable

1 Vulnerability: Clickjacking Vulnerable Domain: lists.dovecot.fi Vulnerable URL: http://lists.dovecot.fi/?C=N;O=D%3Cscript%3Ealert%22Thalaivarsubu%22%3C/script%3E Browser version: Google Chrome 50.0.2661.94 Operating system: Windows 7 Steps to Reproduce: iframe width: 800px; height: 500px;...

Unspecified Vulnerability in Open-Xchange Server and OX App Suite

Open-Xchange Server is a semi-open source project mainly used for developing collaboration software; OX App Suite is a set of Web cloud desktop environment. Open-Xchange Server and OX App Suite have unspecified vulnerabilities, and no detailed vulnerability details are available at this time...

Open-Xchange Appsuite Information Disclosure Vulnerability (CNVD-2016-00986)

Open-Xchange AppSuite is a set of Web-based cloud desktop environments from the US-based Open-Xchange. A security vulnerability exists in Open-Xchange AppSuite that allows remote attackers to submit special requests to obtain sensitive information...

CVE-2015-7385

Cross-site scripting XSS vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."...

Cross site scripting

Cross-site scripting XSS vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."...

CVE-2015-7385

Open-Xchange OX Guard up to version 2.0.0-rev11 is affected by a Cross-site scripting (XSS) flaw in the Guard PGP Settings. The uid field in a PGP public key can carry arbitrary user-id content that may be rendered in the affected UI, enabling remote attackers to inject JavaScript/HTML. Public ke...

CVE-2015-7385

Cross-site scripting XSS vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings."...

Open-Xchange OX Guard Cross-Site Scripting Vulnerability

Open-Xchange OX Guard is a security suite for email and documents. A cross-site scripting vulnerability exists in Open-Xchange OX Guard. This vulnerability can be exploited by remote attackers to execute arbitrary script code within the context of a user's browser program and steal cookie-based...

Open-Xchange Guard 2.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Product: Open-Xchange Guard Vendor: Open-Xchange GmbH Internal reference: 41466 Bug ID Vulnerability type: Cross-Site-Scripting CWE-80 Vulnerable version: 2.0 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by...