1311 matches found
Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2019-36981)
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite versions 7.10.1 and 7.10.2. The vulnerabili...
CVE-2019-14227
OX App Suite 7.10.1 and 7.10.2 allows XSS...
CVE-2019-14225
OX App Suite 7.10.1 and 7.10.2 allows SSRF...
CVE-2019-14227
OX App Suite 7.10.1 and 7.10.2 allows XSS...
CVE-2019-14225
OX App Suite 7.10.1 and 7.10.2 allows SSRF...
CVE-2019-14226
OX App Suite through 7.10.2 has Insecure Permissions...
CVE-2019-14226
OX App Suite through 7.10.2 has Insecure Permissions...
Server side request forgery (ssrf)
OX App Suite 7.10.1 and 7.10.2 allows SSRF...
Design/Logic Flaw
OX App Suite through 7.10.2 has Insecure Permissions...
Cross site scripting
OX App Suite 7.10.1 and 7.10.2 allows XSS...
CVE-2019-14225
OX App Suite is affected by a Server-Side Request Forgery (SSRF) in the backend for versions 7.10.1 and 7.10.2. Root cause details are not fully described beyond the SSRF label, but fixed versions are 7.10.0-rev33, 7.10.1-rev17, and 7.10.2-rev9. Exploit status is not provided beyond the advisory ...
CVE-2019-14225
OX App Suite 7.10.1 and 7.10.2 allows SSRF...
CVE-2019-14226
OX App Suite through 7.10.2 has Insecure Permissions...
CVE-2019-14226
Open-Xchange OX App Suite prior to fixes 7.10.2 has an insecure permissions issue in the backend affecting versions 7.10.1 and 7.10.2. The vulnerability allows partial confidentiality and integrity impact with no availability impact, and was addressed by vendor with fixed versions 7.10.0-rev33, 7...
CVE-2019-14227
OX App Suite 7.10.1 and 7.10.2 allows XSS...
CVE-2019-14227
Open-Xchange OX App Suite is affected by CVE-2019-14227 (XSS) in versions 7.10.1 and 7.10.2. The vulnerability stems from insufficient validation of client-side data in the WEB application, enabling cross-site scripting. Reported in multiple sources, with remediation provided by vendor fixes: 7.1...
Open-Xchange OX App Suite SSRF / XSS / Information Disclosure / Access Controls
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs appsuite, dovecot, powerdns at HackerOne. Yours sincerely...
CVE-2019-11806
OX App Suite 7.10.1 and earlier has Insecure Permissions...