1686 matches found
PT-2020-9991
Name of the Vulnerable Software and Affected Versions: OX App Suite versions through 7.10.2 Description: The issue allows for Server-Side Request Forgery SSRF, which is a type of attack where an attacker can trick a server into making requests to internal or external systems. No information is...
Path traversal
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange OX AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted 1 OLE Object or 2 image in an OpenDocument text file...
CVE-2014-5236
CVE-2014-5236 affects Open-Xchange AppSuite, where the documentconverter component is vulnerable to absolute path traversal via crafted OLE Objects or images in OpenDocument text files. The impact is reading sensitive server files. Vendors provided fixes in versions: 7.4.2-rev10 and 7.6.0-rev10. ...
CVE-2014-5236: Improper Limitation of a Pathname to a Restricted Directory
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange OX AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted 1 OLE Object or 2 image in an OpenDocument text file...
PT-2020-7710
Name of the Vulnerable Software and Affected Versions Open-Xchange OX AppSuite versions prior to 7.4.2-rev10 Open-Xchange OX AppSuite versions 7.6.x prior to 7.6.0-rev10 Description The issue allows remote attackers to read application files via a full pathname in a crafted OLE Object or image in...
Open-Xchange OX App Suite Access Control Error Vulnerability (CNVD-2020-43160)
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange App Suite 7.10.2 and prior versions. The vulnerability...
CVE-2014-5238
XML external entity XXE vulnerability in Open-Xchange OX AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document...
CVE-2014-5238
XML external entity XXE vulnerability in Open-Xchange OX AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document...
CVE-2014-5238
CVE-2014-5238 concerns an XML external entity (XXE) vulnerability in Open-Xchange AppSuite. The OpenDocument Text handling allows expansion of XML entities (DTD recursive entities), enabling an attacker to read server files via a crafted document. The NVD entry notes the affected products as Open...
CVE-2014-5238: Improper Restriction of XML External Entity Reference
XML external entity XXE vulnerability in Open-Xchange OX AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document...
PT-2020-7711
Name of the Vulnerable Software and Affected Versions Open-Xchange OX AppSuite versions prior to 7.4.2-rev11 Open-Xchange OX AppSuite versions 7.6.x prior to 7.6.0-rev9 Description The issue allows remote attackers to read arbitrary files and possibly have other unspecified impacts via a crafted...
CVE-2019-16717
OX App Suite through 7.10.2 has XSS...
CVE-2019-16716
OX App Suite through 7.10.2 has Incorrect Access Control...
CVE-2019-16717
OX App Suite through 7.10.2 has XSS...
CVE-2019-16716
OX App Suite through 7.10.2 has Incorrect Access Control...
Cross site scripting
OX App Suite through 7.10.2 has XSS...
Improper access control
OX App Suite through 7.10.2 has Incorrect Access Control...
CVE-2019-16716
Open-Xchange OX App Suite (backend) is affected through version 7.10.2 and earlier, with an Incorrect Access Control issue and related Cross‑Site Scripting vulnerability described in PACKETSTORM. The vulnerability could allow script injection when PNG attachments are manipulated and a specific UR...
