1311 matches found
CVE-2021-23936
OX App Suite through 7.10.4 allows XSS via the subject of a task...
CVE-2020-24701
OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI...
CVE-2020-24700
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring...
CVE-2020-24701
OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI...
Server side request forgery (ssrf)
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring...
Design/Logic Flaw
OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI...
CVE-2020-24701
CVE-2020-24701 affects OX App Suite up to version 7.10.4. The issue is a Cross-Site Scripting (XSS) via the app loading mechanism, exploiting PATH_INFO to the /appsuite URI. This allows injection of JavaScript by an attacker, with potential impact including theft of session cookies and actions on...
CVE-2020-24700
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring...
CVE-2020-24700
OX App Suite (Open-Xchange) up to 7.10.3 is affected by a Server-Side Request Forgery (SSRF) in the backend where GET requests to arbitrary domains can be triggered via an initial autoconfig substring. The issue is documented across multiple sources (NVD, Red Hat, PacketStorm) and centers on the ...
Open-xchange OX App Suite 跨站脚本漏洞
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker could exploit this vulnerability via an inline binary to conduct a cross-site...
Open-xchange OX App Suite 跨站脚本漏洞
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.3 and earlier versions. The vulnerability can be exploited by an attacker to conduct a cross-site...
Open-xchange OX App Suite 跨站脚本漏洞
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks by using th...
Open-xchange OX App Suite 跨站脚本漏洞
OX App Suite is a modular platform designed for telcos, hosting companies and vendors to deliver a wide range of cloud-based services. A cross-site scripting vulnerability exists in OX App Suite 7.10.4. An attacker can exploit this vulnerability to conduct a cross-site scripting attack via...
OX App Suite / OX Documents 7.10.x XSS / SSRF
Product: OX App Suite / OX Documents Vendor: OX Software GmbH Internal reference: MWB-423 Vulnerability type: Server-Side Request Forgery CWE-918 Vulnerable version: 7.10.4 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version:...
Open-Xchange OX App Suite Cross-Site Scripting Vulnerability
Open-Xchange OX App Suite is an email client software from the German company Open-Xchange. A cross-site scripting vulnerability exists in OX App Suite version 7.10.4 and prior versions, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can explo...
Dovecot 2.3.11.3 Denial Of Service Vulnerability
Dovecot 2.3.11.3 Denial Of Service Vulnerability Vendor: OX Software GmbH Internal reference: DOV-4113 Bug ID Vulnerability type: CWE-20: Improper Input Validation Vulnerable version: 2.3.11-2.3.11.3 Vulnerable component: lda, lmtp, imap Report confidence: Confirmed Solution status: Fixed by Vend...
Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2020-60334)
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX App Suite version 7.10.3 and prior versions, which stems from a la...
CVE-2020-15002
OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API...