1686 matches found
CVE-2018-12610
OX App Suite 7.8.4 and earlier allows Information Exposure...
Directory traversal
OX App Suite 7.8.4 and earlier allows Directory Traversal...
Server side request forgery (ssrf)
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery...
CVE-2018-12611
OX App Suite 7.8.4 and earlier is affected by a directory traversal vulnerability in the backend component. The issue arises from unexpected values of the content XML tag’s type parameter, which bypasses the content sanitizer and can disclose files. Affected versions: 7.8.4 and earlier; fixed in ...
CVE-2018-12611
OX App Suite 7.8.4 and earlier allows Directory Traversal...
CVE-2018-12609
OX App Suite (Open-Xchange) 7.8.4 and earlier is affected by a server-side request forgery (SSRF) in the backend content handling. Exploitation could cause the server to fetch arbitrary resources. Remediation: upgrade to 7.8.4-rev34 or 7.8.3-rev49 (fixed versions).
CVE-2018-12610
OX App Suite 7.8.4 and earlier allows Information Exposure...
CVE-2018-12611
OX App Suite 7.8.4 and earlier allows Directory Traversal...
CVE-2018-12609
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery...
CVE-2018-12610
Open-Xchange OX App Suite backend component has an Information Disclosure vulnerability affecting versions 7.8.4 and 7.8.3. The issue allows exposure of email addresses (information exposure) and was addressed with fixes in 7.8.4-rev34 and 7.8.3-rev49 (public advisory disclosures reference CVE-20...
PT-2019-8902
Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.8.4 Description The issue allows for Server-Side Request Forgery. No information is provided about the estimated number of potentially affected devices or real-world incidents. Recommendations For versions prio...
CVE-2018-12609: Server-Side Request Forgery (SSRF)
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery...
PT-2019-8904
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.8.4 and earlier Description The issue allows Directory Traversal. Recommendations For OX App Suite versions 7.8.4 and earlier, update to a version later than 7.8.4 to resolve the issue...
CVE-2018-12610: Exposure of Sensitive Information to an Unauthorized Actor
OX App Suite 7.8.4 and earlier allows Information Exposure...
CVE-2018-12611: Improper Neutralization of Input During Web Page Generation
OX App Suite 7.8.4 and earlier allows Directory Traversal...
PT-2019-8903
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.8.4 and earlier Description The issue allows information exposure. Recommendations For OX App Suite versions 7.8.4 and earlier, update to a version later than 7.8.4 to resolve the issue...
Open-Xchange OX App Suite Cross Site Scripting / SSRF
Product: OX App Suite Vendor: OX Software GmbH Internal reference: 59653 Bug ID Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.0 Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.0-rev13 Vendor notification:...
Ox App Suite 7.8.4 / 7.8.3 XSS / CSRF / Information Disclosure
Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs open-xchange, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product:...
ox-fanzine.de XSS vulnerability
Open Bug Bounty ID: OBB-707577 Description| Value ---|--- Affected Website:| ox-fanzine.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
