CVE-2013-2582

CVE-2013-2582 affects Open-Xchange Server 6 / OX AppSuite. The vulnerability is a CRLF injection in the redirect servlet caused by insufficient whitespace sanitization, enabling attackers to inject HTTP headers and perform open redirects. Affected fixed versions per vendor advisory: 6.22.0-rev15,...

CVE-2013-5698

CVE-2013-5698 is an XSS vulnerability in Open-Xchange AppSuite and Server. The flaw affects the product versions listed in the description: Open-Xchange AppSuite/Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8, where a crafted delivery...

Open-Xchange Security Advisory 2013-06-03

Open-Xchange Security Advisory multiple vulnerabilities Multiple security issues for Open-Xchange Server 6 and OX AppSuite have been discovered and fixed. The vendor has chosen a responsible full disclosure method to publish security issue details. Users of the software have already been provided...