1311 matches found
CVE-2023-24605
OX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from a drive, reading contact data, and renaming tokens...
CVE-2023-24604
OX App Suite before backend 7.10.6-rev37 does not validate HTTP header lengths when downloading data (e.g., iCal feeds), potentially allowing unlimited header data exposure. Affected product/version: OX App Suite prior to 7.10.6-rev37. CVSS 3.1 base score 4.3 (MEDIUM). Remediation: update to 7.10...
CVE-2023-24598
OX App Suite before backend 7.10.6-rev37 has an information leak in the handling of distribution lists, e.g., partial disclosure of the private contacts of another user...
CVE-2023-24603
CVE-2023-24603 affects Open-Xchange OX App Suite prior to backend 7.10.6-rev37. The vulnerability stems from missing size-limits when downloading data, e.g., a crafted iCal feed could deliver unlimited data, potentially leading to information exposure and resource abuse. Public sources in the con...
CVE-2023-24598
OX App Suite before backend 7.10.6-rev37 has an information leak in the handling of distribution lists, e.g., partial disclosure of the private contacts of another user...
CVE-2023-24601
OX App Suite before frontend 7.10.6-rev24 allows XSS via a non-app deeplink such as the jslob API's registry sub-tree...
CVE-2023-24601
OX App Suite before frontend 7.10.6-rev24 allows XSS via a non-app deeplink such as the jslob API's registry sub-tree...
CVE-2023-24599
CVE-2023-24599 affects Open-Xchange OX App Suite prior to backend 7.10.6-rev37, where an authenticated user can change the appointments of arbitrary users due to conflicting ID numbers (ID confusion). The issue is tied to the appointment modification flow and allows privilege abuse within the pro...
Open-Xchange OX App Suite 跨站脚本漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite version 7.10.6-rev23. An attacker could exploit the vulnerability to view user privacy...
Open-Xchange OX App Suite 信息泄露漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. An information disclosure vulnerability exists in Open-Xchange OX App Suite version 7.10.6-rev23. An attacker could exploit the vulnerability to view user privacy...
Open-Xchange OX App Suite 信息泄露漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. An information disclosure vulnerability exists in Open-Xchange OX App Suite version 7.10.6-rev23. An attacker could exploit the vulnerability to view user privacy...
Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph
Summary IBM has released the below fix for IBM Db2® Graph in response to multiple vulnerabilities found in multiple components Vulnerability Details CVEID:CVE-2022-41881 DESCRIPTION: Netty is vulnerable to a denial of service, caused by a StackOverflowError in HAProxyMessageDecoder. By sending a...
CVE-2022-37306
OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...
Cross site scripting
OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...
CVE-2022-37306
OX App Suite (Open-Xchange) vulnerable before 7.10.6-rev30 to cross-site scripting via an upsell trigger. Affected file/component: OX App Suite web interface; root cause: improper sanitization in upsell-trigger handling leading to XSS. Versions prior to 7.10.6-rev30 are impacted; update to 7.10.6...
PT-2023-13526 · Open Xchange · Ox App Suite
Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev30 Description: The issue allows for XSS via an upsell trigger. Recommendations: For versions prior to 7.10.6-rev30, update to version 7.10.6-rev30 or later to resolve the issue...
CVE-2022-37306
OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...
CVE-2022-37306
OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger...