CVE-2017-13667

OX App Suite from OX Software GmbH (version 7.8.4 and earlier) is affected by an SSRF vulnerability. Public sources identify this CVE as CVE-2017-13667. Estimated impact per NVD includes CVSS v3.0 base score 9.9 (CRITICAL) with network access, low attack complexity, and no user interaction requir...

CVE-2017-13667

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF...

CVE-2017-13668

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

Cross site scripting

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

CVE-2017-17060

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions...

Cross site scripting

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

CVE-2017-17061

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

Design/Logic Flaw

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions...

CVE-2017-13668

CVE-2017-13668 affects Open-Xchange OX App Suite 7.8.4 and earlier. The provided documents identify a Cross Site Scripting (XSS) vulnerability within this product, but do not specify vulnerable components, versions beyond 7.8.4, root cause details, exploit availability, or tested impact vectors. ...

CVE-2017-13668

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

CVE-2017-17060

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions...

CVE-2017-17060

CVE-2017-17060 affects Open-Xchange Open-Xchange App Suite 7.8.4 and earlier. The root cause is insecure permissions, enabling unauthorized access/further impact on confidentiality, integrity, and availability as reflected by the CVSS data (high base scores; CVSS3 vector shows network attack, no ...

CVE-2017-17061

OX App Suite (Open-Xchange) 7.8.4 and earlier is affected by a Cross-Site Scripting (XSS) vulnerability. The root cause, per CNVD-2019-16167, is insufficient validation of client-side data by the web application, enabling attacker-controlled scripts to run in a victim’s browser. Affected product:...

CVE-2017-17061

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

Cross site scripting

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

CVE-2017-9808

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

CVE-2017-9809

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure...

Design/Logic Flaw

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure...

CVE-2017-9808

CVE-2017-9808 affects Open-Xchange Open-Xchange App Suite versions 7.8.4 and earlier with a Cross-Site Scripting (XSS) vulnerability. The CNVD description attributes the root cause to a lack of proper validation of client-side data by the WEB application. NVD metrics list a CVSSv2 base score of 4...

CVE-2017-9808

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...