1311 matches found
CVE-2019-11806
OX App Suite 7.10.1 and earlier has Insecure Permissions...
CVE-2019-11522
OX App Suite 7.10.0 to 7.10.2 allows XSS...
CVE-2019-11522
OX App Suite 7.10.0 to 7.10.2 allows XSS...
Spoofing
OX App Suite 7.10.1 allows Content Spoofing...
Cross site scripting
OX App Suite 7.10.0 to 7.10.2 allows XSS...
CVE-2019-11806
OX App Suite 7.10.1 and earlier has Insecure Permissions...
CVE-2019-11806
OX App Suite affected: Open-Xchange OX App Suite, versions 7.10.1 and earlier. Root cause: insecure permissions leading to potential information exposure. CVSS (3.0) indicates local access, low privileges required, Confidentiality impact: Low; Integrity/Availability not affected. Exploitation sta...
CVE-2019-11522
CVE-2019-11522 affects Open-Xchange OX App Suite, versions 7.10.0–7.10.2, where a frontend component vulnerability allows content spoofing that leads to Cross-Site Scripting (XSS). The in-document details identify the vulnerability as Content Spoofing (CWE-451) with the vulnerable version 7.10.1 ...
CVE-2019-11522
OX App Suite 7.10.0 to 7.10.2 allows XSS...
CVE-2019-11521
OX App Suite 7.10.1 allows Content Spoofing...
CVE-2019-11521
Open-Xchange OX App Suite 7.10.1 is vulnerable to Content Spoofing (CWE-451) in the frontend. The cited advisory notes that appointment titles rendered as hyperlinks lacked protection against tab-nabbing, enabling spoofed content presentation. Public disclosures and Red Hat/NVD references corrobo...
Open-Xchange OX App Information Disclosure Vulnerability (CNVD-2019-40057)
Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...
Open-Xchange OX App Suite Content Spoofing / Cross Site Scripting
Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs appsuite, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product: OX...
Open-Xchange OX Guard Cross Site Scripting / Signature Validation
Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs appsuite, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product: OX...
CVE-2018-10986
OX Guard 2.8.0 has CSRF...
CVE-2018-10986
OX Guard 2.8.0 has CSRF...
Cross site request forgery (csrf)
OX Guard 2.8.0 has CSRF...
CVE-2018-10986
CVE-2018-10986: OX Guard 2.8.0 is affected by a CSRF vulnerability. The CVSSv3 base score is 8.8 (HIGH) with network access, low attack complexity, and user interaction required; impacts include Confidentiality, Integrity, and Availability (all HIGH).