1686 matches found
CVE-2020-12645: Improper Restriction of Excessive Authentication Attempts
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption...
PT-2020-13184
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.3 and earlier Description The issue allows for XSS attacks through various means, including text/x-javascript, text/rdf, or a PDF document. Recommendations For OX App Suite versions 7.10.3 and earlier, update to a...
OX App Suite / OX Documents XSS / SSRF / Bypass
Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs for OX App Suite, Dovecot and PowerDNS at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH...
Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2020-52700)
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite versions 7.10.3 and earlier. The...
Open-Xchange OX App Suite Resource Management Error Vulnerability
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A resource management error vulnerability exists in Open-Xchange OX App Suite 7.10.3 and prior versions. A remote...
Open-Xchange OX App Suite code issue vulnerability (CNVD-2020-52698)
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A code issue vulnerability exists in Open-Xchange OX App Suite 7.10.3 and prior versions. An attacker could exploit...
CVE-2020-8542
OX App Suite through 7.10.3 allows XSS...
CVE-2020-8544
OX App Suite through 7.10.3 allows SSRF...
CVE-2020-8543
OX App Suite through 7.10.3 has Improper Input Validation...
CVE-2020-8541
OX App Suite through 7.10.3 allows XXE attacks...
CVE-2020-8541
OX App Suite through 7.10.3 allows XXE attacks...
CVE-2020-8543
OX App Suite through 7.10.3 has Improper Input Validation...
CVE-2020-8544
OX App Suite through 7.10.3 allows SSRF...
CVE-2020-8542
OX App Suite through 7.10.3 allows XSS...
Cross site scripting
OX App Suite through 7.10.3 allows XSS...
Input validation
OX App Suite through 7.10.3 has Improper Input Validation...
CVE-2020-8541
OX App Suite through 7.10.3 allows XXE attacks...
CVE-2020-8543
OX App Suite through 7.10.3 has Improper Input Validation...