CVE-2016-2840

An issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26. The "session" parameter for file-download requests can be used to inject script code that gets reflected through the subsequent status page. Malicious script code can be executed within a trusted domain's context...

CVE-2016-2840

Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26 is affected. The issue arises from the session parameter on file-download requests, allowing injected script to be reflected on the subsequent status page and executed within a trusted domain’s context. Exploitation does not require authentic...

CVE-2016-6850

The CVE-2016-6850 issue affects Open-Xchange OX App Suite before 7.8.2-rev8, where SVG profile pictures can carry iframes and script in their XML. This allows malicious script execution in a user’s browser context, potentially leading to session hijacking or unintended actions (e.g., sending mail...

CVE-2016-6854

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inline PGP signature gets executed when verifying the signature. Malicious script code can be executed within a user's context. This can lead to session hijacking or triggering unwant...

CVE-2016-4046

Open-Xchange OX App Suite (before 7.8.1-rev11) is affected by CVE-2016-4046. The API used to configure external mail accounts can be abused to map and access network components within the operator’s trust boundary; attackers can inject arbitrary hosts and ports into API calls, enabling informatio...

CVE-2016-6847

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as mp3 album covers. In case their XML structure contains script code, that code may get executed when calling the related cover URL. Malicious script code can be executed within a user's context. This c...

CVE-2016-6843

Open-Xchange OX App Suite before 7.8.2-rev8 is affected. When adding contacts to a group via autocomplete, script code can be injected and executed in the context of the user creating or changing the group, potentially leading to session hijacking or unwanted actions in the web interface (e.g., s...

PT-2016-7139

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.2-rev8 Description An issue allows malicious script code to be executed within a user's context when SVG files containing script code are used as mp3 album covers. This can lead to session...

PT-2016-5819

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.1-rev8 Description An issue was discovered where references to external Open XML document type definitions .dtd resources can be placed within .docx and .xslx files. When parsing certain parts of...

CVE-2016-4028: Undefined Security Weakness

An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' credentials. The OX Guard API acts as a padding oracle by responding with different error codes depending on whether the provided token matches the...

PT-2016-5817

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.1-rev11 Description An issue allows script code to be embedded in RSS feeds using a URL notation. If a user clicks the corresponding link in the App Suite RSS reader, the code is executed in the...

PT-2016-5818

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.1-rev11 Description An issue allows the API for configuring external mail accounts to be exploited, enabling access to network components within the operator's trust boundary. Users can inject...

PT-2016-7136

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.2-rev8 Description An issue allows script code to be injected into contact names. When these contacts are added to a group using autocomplete, the script code is executed in the context of the us...

PT-2016-7137

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.2-rev8 Description An issue in Open-Xchange OX App Suite allows script code within SVG files to be maintained when opening such files in browser, based on the Mail or Drive app. This can lead to...

CVE-2016-6847: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as mp3 album covers. In case their XML structure contains script code, that code may get executed when calling the related cover URL. Malicious script code can be executed within a user's context. This c...

PT-2016-7143

Name of the Vulnerable Software and Affected Versions Open-Xchange OX App Suite versions prior to 7.8.2-rev8 Description An issue in Open-Xchange OX App Suite allows users to provide local file paths to the RSS reader. The response and error code can give hints about whether the provided file...

CVE-2016-6852: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS reader; the response and error code give hints about whether the provided file exists or not. Attackers may discover specific system files or library versions on the middleware...

CVE-2016-6851: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX Guard guest reader web application. This allows cross-site scripting attacks against arbitrary users since no prior authentication is needed. Malicious script code can be execute...

CVE-2016-6844: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data" references. Malicious script code c...

CVE-2016-3173: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal can be used to inject script code. Those labels use the name of the file e.g. an image which gets displayed at the portal application. Using script code at the file name leads t...