1686 matches found
Open-xchange OX App Suite 跨站脚本漏洞
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via...
Open-xchange OX App Suite 跨站脚本漏洞
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker could exploit this vulnerability via an inline binary to conduct a cross-site...
PT-2021-15617
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for XSS via an inline binary file. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...
PT-2021-15616
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.4 and earlier Description: The issue allows for cross-site scripting XSS via the use of the conversion API for a distributedFile. This can potentially lead to malicious script execution on the client-side...
PT-2021-15619
Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.5 Description: The issue allows for XSS via JavaScript in a Note referenced by a mail:// URL. Recommendations: For OX App Suite versions prior to 7.10.5, update to version 7.10.5 or later to resolve the iss...
CVE-2021-23932: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename...
CVE-2021-23933: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL...
CVE-2021-23927: Server-Side Request Forgery (SSRF)
OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request...
PT-2021-15620
Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.5 Description: The issue allows for XSS attacks via a contact whose name contains JavaScript code. Recommendations: For OX App Suite versions prior to 7.10.5, update to version 7.10.5 or later to resolve th...
PT-2021-11067
Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.3 and earlier Description: The issue allows for Server-Side Request Forgery SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig substring. Recommendations: For OX App Suite versio...
CVE-2021-23935: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code...
OX App Suite / OX Documents 7.10.x XSS / SSRF
Product: OX App Suite / OX Documents Vendor: OX Software GmbH Internal reference: MWB-423 Vulnerability type: Server-Side Request Forgery CWE-918 Vulnerable version: 7.10.4 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version:...
Open-Xchange OX App Suite Cross-Site Scripting Vulnerability
Open-Xchange OX App Suite is an email client software from the German company Open-Xchange. A cross-site scripting vulnerability exists in OX App Suite version 7.10.4 and prior versions, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can explo...
Dovecot 2.3.11.3 Denial Of Service Vulnerability
Dovecot 2.3.11.3 Denial Of Service Vulnerability Vendor: OX Software GmbH Internal reference: DOV-4113 Bug ID Vulnerability type: CWE-20: Improper Input Validation Vulnerable version: 2.3.11-2.3.11.3 Vulnerable component: lda, lmtp, imap Report confidence: Confirmed Solution status: Fixed by Vend...
Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2020-60334)
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX App Suite version 7.10.3 and prior versions, which stems from a la...
CVE-2020-15002
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API...
CVE-2020-15003
OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user via the session API during shared Drive access...
CVE-2020-15002
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API...
