CVE-2020-28943

OX App Suite 7.10.4 and earlier allows SSRF via a snippet...

CVE-2020-28943

OX App Suite 7.10.4 and earlier is affected by CVE-2020-28943, with a server-side request forgery (SSRF) vulnerability exposed via a snippet. The issue affects the frontend portion of OX App Suite and is documented across multiple sources (Red Hat, NVD, CVE listings). The vulnerability enables SS...

CVE-2020-28944: Uncontrolled Resource Consumption

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

PT-2021-11604

Name of the Vulnerable Software and Affected Versions: OX Guard versions 2.10.4 and earlier Description: The issue allows for a Denial of Service via a WKS server that responds slowly or with a large amount of data. Recommendations: For OX Guard versions 2.10.4 and earlier, at the moment, there i...

CVE-2020-28943: Server-Side Request Forgery (SSRF)

OX App Suite 7.10.4 and earlier allows SSRF via a snippet...

OX App Suite / OX Guard SSRF / DoS / Cross Site Scripting

Product: OX App Suite / OX Guard Vendor: OX Software GmbH Affected product: OX App Suite Internal reference: OXUIB-481 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.4 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendo...

PT-2021-19607

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for XSS via a crafted contact object, where the payload in the position or company field is mishandled in the App Suite UI on a smartphone. Recommendations: For OX App Sui...

CVE-2021-31934: Improper Neutralization of Input During Web Page Generation

OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object payload in the position or company field that is mishandled in the App Suite UI on a smartphone...

CVE-2021-31935: Improper Neutralization of Input During Web Page Generation

OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list payload in the common name that is mishandled in the scheduling view...

PT-2021-19608

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for cross-site scripting XSS attacks via a crafted distribution list. Specifically, a payload in the common name of the distribution list is mishandled when viewed in the...

PT-2021-11603

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows Server-Side Request Forgery SSRF via a snippet. SSRF is a type of attack where an attacker can trick a server into making requests to internal or external resources,...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03043)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker could exploit this vulnerability via an inline image with a specially crafted...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03042)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker could exploit this vulnerability via an inline binary to conduct a cross-site...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03041)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks by using th...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03040)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability via a specially crafted Content-Disposition header ...

OX App Suite server-side request forgery vulnerability (CNVD-2021-03039)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A server-side request forgery vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a server-side request forgery...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03047)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via a task...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03045)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via a...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03044)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03046)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. The vulnerability can be exploited to conduct cross-site scripting attacks via a "reservation"...