CVE-2017-17060

CVE-2017-17060 affects Open-Xchange Open-Xchange App Suite 7.8.4 and earlier. The root cause is insecure permissions, enabling unauthorized access/further impact on confidentiality, integrity, and availability as reflected by the CVSS data (high base scores; CVSS3 vector shows network attack, no ...

CVE-2017-17060

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions...

CVE-2017-17061

OX App Suite (Open-Xchange) 7.8.4 and earlier is affected by a Cross-Site Scripting (XSS) vulnerability. The root cause, per CNVD-2019-16167, is insufficient validation of client-side data by the web application, enabling attacker-controlled scripts to run in a victim’s browser. Affected product:...

CVE-2017-17061

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

CVE-2017-5210

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure...

CVE-2017-5210

Open-Xchange OX App Suite 7.8.3 and earlier are affected by an Information Exposure vulnerability (CVE-2017-5210). Affected product: Open-Xchange OX App Suite; version 7.8.3 and earlier. Root cause not explicitly detailed in the provided documents beyond information disclosure. Impact: unauthoriz...

CVE-2017-5211

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing...

CVE-2017-5211

Open-Xchange OX App Suite versions 7.8.3 and earlier are affected by Content Spoofing (CVE-2017-5211). The connected documents confirm the affected product and vulnerability class but do not provide details on root cause, impact specifics, exploitation status, or available fixes. No remediation i...

CVE-2017-5212

Open-Xchange OX App Suite 7.8.3 is affected by an Incorrect Access Control vulnerability (CVE-2017-5212). The issue is reported across multiple feeds (NVD, Red Hat advisory, CVE list, OpenVAS) with no exploitation details provided in the connected documents. Some sources reference additional cont...

CVE-2017-5212

Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control...

CVE-2017-5213

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by Cross Site Scripting (XSS). The root cause described across sources is lack of proper validation of client data in the WEB application, enabling malicious input to be reflected and potentially execute client-side code. The CVE entry ...

CVE-2017-5213

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting XSS...

CVE-2017-15029: Server-Side Request Forgery (SSRF)

Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF...

CVE-2017-17060: Undefined Security Weakness

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions...

CVE-2017-5212: Improper Access Control

Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control...

CVE-2017-5210: Exposure of Sensitive Information to an Unauthorized Actor

Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure...

Open-Xchange OX App Suite License Issues Vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. Open-Xchange OX Software GmbH OX App Suite 7.8.4 and earlier versions are affected by: insecure permissions...

PT-2019-7953

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.8.4 and earlier Description The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website. Recommendations For OX App...

PT-2019-8015

Name of the Vulnerable Software and Affected Versions Open-Xchange GmbH OX App Suite versions 7.8.4 and earlier Description The issue affects Open-Xchange GmbH OX App Suite, allowing for a Server-Side Request Forgery SSRF attack. Recommendations For versions 7.8.4 and earlier, update to a version...

PT-2019-8573

Name of the Vulnerable Software and Affected Versions Open-Xchange GmbH OX App Suite versions 7.8.3 and earlier Description The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website...