1686 matches found
CVE-2022-43697
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
PT-2023-14289 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev30 Description: The issue allows for cross-site scripting XSS via an activity tracking adapter defined by jslob. This can potentially lead to malicious script execution on the client-side...
CVE-2022-43697: Improper Neutralization of Input During Web Page Generation
OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob...
CVE-2022-43696
OX App Suite before 7.10.6-rev20 allows XSS via upsell ads...
CVE-2022-43699
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain found in the host part of an e-mail address...
CVE-2022-43696
OX App Suite before 7.10.6-rev20 allows XSS via upsell ads...
CVE-2022-43698
OX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list...
CVE-2022-43696
CVE-2022-43696 affects Open-Xchange OX App Suite prior to 7.10.6-rev20 , where XSS via upsell ads is possible. The vulnerability concerns the web UI component handling upsell ads, enabling cross-site scripting. According to PT-2023-14288 and multiple CVE aggregations, the recommended remediation ...
CVE-2022-43699
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain found in the host part of an e-mail address...
PT-2023-14291
Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.6-rev30 Description The issue allows for Server-Side Request Forgery SSRF due to e-mail account discovery disregarding the deny-list. This can be exploited by an adversary who controls the DNS records of an...
CVE-2022-43696
OX App Suite before 7.10.6-rev20 allows XSS via upsell ads...
CVE-2022-43696: Improper Neutralization of Input During Web Page Generation
OX App Suite before 7.10.6-rev20 allows XSS via upsell ads...
CVE-2022-43699: Server-Side Request Forgery (SSRF)
OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain found in the host part of an e-mail address...
CVE-2022-43699
OX App Suite prior to 7.10.6-rev30 is affected by a server-side request forgery (SSRF) vulnerability stemming from email account discovery ignoring the deny-list, allowing an attacker who controls DNS for an external domain (present in the host part of an email address) to trigger SSRF. Affected ...
CVE-2022-43698: Server-Side Request Forgery (SSRF)
OX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list...
CVE-2022-43698
Open-Xchange OX App Suite prior to version 7.10.6-rev30 is affected by an SSRF vulnerability: modifying a POP3 account can bypass the deny-list, enabling potential unauthorized requests within the application. The issue is documented across multiple feeds (NVD/Red Hat/OSV/etc.) with the same desc...
oxdentistry.com Cross Site Scripting vulnerability OBB-3220000
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-37309
OX App Suite through 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name...
