CVE-2020-8541

OX App Suite through 7.10.3 allows XXE attacks...

CVE-2020-15002

OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API...

CVE-2020-28943

OX App Suite 7.10.4 and earlier allows SSRF via a snippet...

CVE-2020-12643

OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address...

CVE-2020-12646

OX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document...

CVE-2020-15004

OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-8542

OX App Suite through 7.10.3 allows XSS...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-8544

OX App Suite through 7.10.3 allows SSRF...

CVE-2020-8543

OX App Suite through 7.10.3 has Improper Input Validation...

CVE-2020-28944

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

CVE-2020-28945

OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as !http://onerror=Function.constructor, in a Notes item...

CVE-2020-15003

OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user via the session API during shared Drive access...

CVE-2019-14225

OX App Suite 7.10.1 and 7.10.2 allows SSRF...

CVE-2019-11522

OX App Suite 7.10.0 to 7.10.2 allows XSS...

CVE-2019-14226

OX App Suite through 7.10.2 has Insecure Permissions...

CVE-2019-14227

OX App Suite 7.10.1 and 7.10.2 allows XSS...

CVE-2017-9809

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure...

CVE-2017-13667

OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF...