CVE-2021-44208

OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat...

CVE-2021-44208

OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat...

CVE-2021-44208

OX App Suite 7.10.5 contains a Cross-Site Scripting (XSS) vulnerability in the Chat component, where system messages deemed unknown are not escaped, enabling potential script execution within a victim’s browser context. The vulnerability affects the frontend for OX App Suite versions 7.10.5, with...

CVE-2021-44209: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO...

PT-2022-12015

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS attacks via the class attribute of an element in an HTML e-mail signature. This can potentially lead to malicious script execution on the...

PT-2022-12013

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS attacks via an HTML 5 element, such as AUDIO. This can potentially lead to malicious script execution on the client-side. Recommendations For OX...

PT-2022-12016

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS attacks via a trailing control character, such as the SCRIPTt substring. Recommendations For OX App Suite versions 7.10.5 and earlier, update to...

CVE-2021-44211: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature...

CVE-2021-44210: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via NIFF Notation Interchange File Format data...

CVE-2021-44212: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring...

PT-2022-12014

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for XSS Cross-Site Scripting attacks via NIFF Notation Interchange File Format data. This means an attacker could potentially inject malicious scripts into a website,...

PT-2022-12017

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS via uuencoding in a multipart/alternative message. This can potentially lead to malicious script execution on the client-side. Recommendations F...

CVE-2021-44208: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat...

CVE-2021-44213: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message...

PT-2022-12012

Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for XSS via an unknown system message in the Chat component. No information is provided about the estimated number of potentially affected devices or real-world incidents...

Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2022-28457)

Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-xchange OX App Suite version 7.10.5 and prior...

Open-xchange OX App Suite cross-site scripting vulnerability (CNVD-2022-28451)

Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A security vulnerability exists in Open-xchange OX App Suite versions 7.10.5 and below, and no detailed...

Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2022-28455)

Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX App Suite version 7.10.5 and prior versions, no...

Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2022-28450)

Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-xchange OX App Suite version 7.10.5 and prior...

OX App Suite 7.10.5 Cross Site Scripting

Product: OX App Suite Vendor: OX Software GmbH Internal reference: OXUIB-1092 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.5 Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.5-rev26 Vendor notification:...