1686 matches found
PT-2021-22089
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS attacks via the alt attribute of an IMG element in a truncated e-mail message. Recommendations For OX App Suite versions 7.10.5 and earlier,...
CVE-2021-33492: Improper Neutralization of Input During Web Page Generation
OX App Suite 7.10.5 allows XSS via an OX Chat room name...
CVE-2021-33491: Improper Limitation of a Pathname to a Restricted Directory
OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records...
CVE-2021-33489: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...
CVE-2021-38378: Undefined Security Weakness
OX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified By response to show a person's name...
PT-2021-22091
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for XSS via JavaScript code in an anchor HTML comment within truncated e-mail. This is possible because there is a predictable UUID with HTML transformation results...
PT-2021-22092
Name of the Vulnerable Software and Affected Versions OX App Suite version 7.10.5 Description The issue allows information exposure due to a caching mechanism that can cause a Modified By response to show a person's name. Recommendations For OX App Suite version 7.10.5, consider disabling the...
Open-xchange OX App Suite 跨站脚本漏洞
Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited...
PT-2021-20150
Name of the Vulnerable Software and Affected Versions OX App Suite versions 7.10.5 and earlier Description The issue allows for cross-site scripting XSS attacks via JavaScript code in a shared XCF file. This can potentially lead to the execution of malicious scripts on the client-side...
OX App Suite 7.10.5 Cross Site Scripting / Information Disclosure Vulnerability
OX App Suite versions 7.10.5 and below suffer from cross site scripting and information disclosure vulnerabilities. Product: OX App Suite Vendor: OX Software GmbH Internal reference: OXUIB-872 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.5 and earlier Vulnerable...
PT-2021-20154
Name of the Vulnerable Software and Affected Versions OX App Suite version 7.10.5 Description The issue allows for XSS via an OX Chat room name. Recommendations For OX App Suite version 7.10.5, update to a version that fixes this issue. At the moment, there is no information about a newer version...
Open-xchange OX App Suite 安全漏洞
Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company that allows users to more intuitively manage email, tasks, files, etc. An information disclosure vulnerability exists in Open-xchange OX App Suite. An information disclosure...
CVE-2021-38374: Improper Neutralization of Input During Web Page Generation
OX App Suite through through 7.10.5 allows XSS via a crafted snippet that has an app loader reference within an app loader URL...
Open-xchange OX App Suite 代码注入漏洞
Open-xchange OX App Suite is a Web cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A code injection vulnerability exists in Open-xchange OX App Suite, which can be exploited by attacker...
OX App Suite 7.10.5 Cross Site Scripting / Information Disclosure
Product: OX App Suite Vendor: OX Software GmbH Internal reference: OXUIB-872 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.5 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.3-rev30, 7.10.4-rev2...
CVE-2021-33490: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature...
CVE-2021-28095
OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32...
CVE-2021-28094
OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32...