CVE-2021-31935

OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list payload in the common name that is mishandled in the scheduling view...

CVE-2021-31934

OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object payload in the position or company field that is mishandled in the App Suite UI on a smartphone...

CVE-2020-28944

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

Cross site scripting

OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list payload in the common name that is mishandled in the scheduling view...

Code injection

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

Cross site scripting

OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object payload in the position or company field that is mishandled in the App Suite UI on a smartphone...

Server side request forgery (ssrf)

OX App Suite 7.10.4 and earlier allows SSRF via a snippet...

CVE-2021-31934

OX App Suite 7.10.4 and earlier is affected by a Cross-Site Scripting (XSS) vulnerability in the UI on smartphones, triggered by a crafted contact object in which payloads placed in the position or company fields are mishandled. The issue is confirmed across multiple sources (NVD, Red Hat, CNVD, ...

CVE-2021-31934

OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object payload in the position or company field that is mishandled in the App Suite UI on a smartphone...

CVE-2021-31935

OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list payload in the common name that is mishandled in the scheduling view...

CVE-2021-31935

OX App Suite 7.10.4 and earlier is vulnerable to Cross-Site Scripting via a crafted distribution list, where the payload in the distribution list’s common name is mishandled in the scheduling view. This vulnerability is described consistently across CVE-2021-31935 records (NVD, Red Hat, CNVD, CVE...

CVE-2020-28944

CVE-2020-28944 affects Open-Xchange/OX App Suite (OX Guard) prior to fixes. The connected packetstorm entry confirms vulnerable product/version: OX App Suite 7.10.4 and earlier with a Denial of Service via a WKS server that responds slowly or with large data volumes. The vulnerability affects the...

CVE-2020-28944

OX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or with a large amount of data...

CVE-2020-28943

OX App Suite 7.10.4 and earlier allows SSRF via a snippet...

CVE-2020-28943

OX App Suite 7.10.4 and earlier is affected by CVE-2020-28943, with a server-side request forgery (SSRF) vulnerability exposed via a snippet. The issue affects the frontend portion of OX App Suite and is documented across multiple sources (Red Hat, NVD, CVE listings). The vulnerability enables SS...

OX App Suite / OX Guard SSRF / DoS / Cross Site Scripting

Product: OX App Suite / OX Guard Vendor: OX Software GmbH Affected product: OX App Suite Internal reference: OXUIB-481 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.4 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendo...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03044)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03043)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker could exploit this vulnerability via an inline image with a specially crafted...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03040)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability via a specially crafted Content-Disposition header ...

OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-03042)

OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker could exploit this vulnerability via an inline binary to conduct a cross-site...