CVE-2022-31469

OX App Suite through 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /!!=%2e./ URI...

CVE-2022-31468

OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter...

CVE-2017-12884

OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure...

CVE-2017-12885

OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting XSS...

CVE-2019-11521

OX App Suite 7.10.1 allows Content Spoofing...

CVE-2019-11806

OX App Suite 7.10.1 and earlier has Insecure Permissions...

CVE-2020-12644

OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API...

CVE-2020-12645

OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption...

CVE-2020-24700

OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring...

CVE-2020-24701

OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI...

CVE-2019-7158

OX App Suite 7.10.0 and earlier has Incorrect Access Control...

CVE-2019-7159

OX App Suite 7.10.1 and earlier allows Information Exposure...

CVE-2019-16716

OX App Suite through 7.10.2 has Incorrect Access Control...

CVE-2019-16717

OX App Suite through 7.10.2 has XSS...

EUVD-2025-117213

Malicious code in naval-apricot-ox npm...

EUVD-2025-105454

Malicious code in essentialoxz3n npm...

EUVD-2025-74599

Malicious code in gradualoxmagenta-50 npm...

EUVD-2025-76705

Malicious code in grumpyox-strongdev npm...

EUVD-2025-78083

Malicious code in traditionaloxz3n npm...

EUVD-2025-79557

Malicious code in conservationoxz3n npm...