1686 matches found
PT-2022-15844 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.6 and earlier Description: The issue allows for cross-site scripting XSS attacks via the appHandler in a deep link within an e-mail message. This can potentially lead to malicious script execution on the client-side...
CVE-2022-23101: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.6 allows XSS via appHandler in a deep link in an e-mail message...
CVE-2022-23099: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.6 allows XSS by forcing block-wise read...
CVE-2022-24406: Use of Insufficiently Random Values
OX App Suite through 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to injection into internal Documentconverter API calls...
PT-2022-15843 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.6 and earlier Description: The issue allows OS Command Injection via Documentconverter, for example, through an email attachment. Recommendations: For OX App Suite versions 7.10.6 and earlier, update to a version...
Open-Xchange OX App Suite 跨站脚本漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange, a German company. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite versions 7.10.6 and below, which stems from the ability to bypass existing HTML file cleanup and filtering...
Open-Xchange OX App Suite 跨站脚本漏洞
Open-Xchange OX App Suite is an e-mail and productivity suite client software from Open-Xchange Germany. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite versions 7.10.5 and below, which stems from deep links in E-Mail e.g., links to Drive files that are not checked for...
Open-Xchange OX App Suite 操作系统命令注入漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. An operating system command injection vulnerability exists in Open-Xchange OX App Suite versions 7.10.6 and below, which stems from a compatibility layer of the documentconverter API that can b...
Open-Xchange OX App Suite 安全特征问题漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. A security feature issue vulnerability exists in Open-Xchange OX App Suite versions prior to 7.10.6 that stems from a conflict that can change the parameters of an API request between OX App...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2022-62756)
Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in OX App Suite version 7.10.4 and earlier, which...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2022-62757)
Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite 7.10.4 and prior...
CVE-2021-44213
OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message...
CVE-2021-44213
OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message...
CVE-2021-44212
OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring...
Cross site scripting
OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring...
Design/Logic Flaw
OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message...
CVE-2021-44208
OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat...
CVE-2021-44210
OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...
