CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

Cross site scripting

OX Guard 2.10.3 and earlier allows XSS...

Server side request forgery (ssrf)

OX Guard 2.10.3 and earlier allows SSRF...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9426

OX Guard 2.10.3 and earlier allows XSS...

CVE-2020-9426

Open-Xchange Open-Xchange OX Guard 2.10.3 and earlier is affected by a Cross-Site Scripting (XSS) vulnerability in the WEB application due to inadequate validation of client data. The issue allows execution of client-side code via manipulated input (e.g., forged public-keys) displayed in Guard se...

CVE-2020-9427

OX Guard 2.10.3 and earlier contains an SSRF vulnerability in the guard component. Affected product: Open-Xchange OX Guard (versions up to 2.10.3). Root cause: improper handling leading to Server-Side Request Forgery. Impact: as described in public advisories; exploit details are corroborated by ...

CVE-2020-9427

OX Guard 2.10.3 and earlier allows SSRF...

OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery Vulnerabilities

Exploit for php platform in category web applications Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed...

OX Guard 2.10.3 Cross Site Scripting / Server-Side Request Forgery

Product: OX Guard Vendor: OX Software GmbH Internal reference: GUARD-179 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 2.10.3 Vulnerable component: guard Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.10.2-rev9, 2.10.3-rev4 Vendor notification...

OX App Suite / OX Documents 7.10.3 XSS / SSRF / Improper Validation

Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs for OX AppSuite, Dovecot and PowerDNS at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH...

Open-Xchange Dovecot 2.3.10 Null Pointer Dereference / Denial Of Service Vulnerabilities

------------------ Open-Xchange Security Advisory 2020-05-18 Product: Dovecot Vendor: OX Software GmbH Internal reference: DOV-3784 Vulnerability type: NULL pointer dereference CWE-476 Vulnerable version: 2.3.0 - 2.3.10 Vulnerable component: submission, lmtp Report confidence: Confirmed Solution...

CVE-2019-18846

OX App Suite through 7.10.2 allows SSRF...

Server side request forgery (ssrf)

OX App Suite through 7.10.2 allows SSRF...

CVE-2019-18846

OX App Suite through 7.10.2 allows SSRF...

CVE-2019-18846

OX App Suite/OX Documents 7.10.2 and earlier are affected by a Server-Side Request Forgery (SSRF) in the attachment API for Calendar/Tasks, where references to attachments could bypass host/protocol checks and cause content from local files or URLs to be added as attachments. Root cause: insuffic...

Path traversal

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange OX AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted 1 OLE Object or 2 image in an OpenDocument text file...

CVE-2014-5236

CVE-2014-5236 affects Open-Xchange AppSuite, where the documentconverter component is vulnerable to absolute path traversal via crafted OLE Objects or images in OpenDocument text files. The impact is reading sensitive server files. Vendors provided fixes in versions: 7.4.2-rev10 and 7.6.0-rev10. ...

Open-Xchange OX App Suite Access Control Error Vulnerability (CNVD-2020-43160)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange App Suite 7.10.2 and prior versions. The vulnerability...