CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2021/11/22 9:15 a.m.•32 views

CVE-2021-38377

OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail, because there is a predictable UUID with HTML transformation results...

6.1CVSS5.7AI score

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2021/11/22 12:00 a.m.•3 views

CVE-2021-38377: Use of Insufficiently Random Values

OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail, because there is a predictable UUID with HTML transformation results...

6.1CVSS5.7AI score0.01156EPSS

SaveExploits3References2

Rapid7 Vulnerability Database (full)•added 2021/11/22 12:00 a.m.•7 views

CVE-2021-38375: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.5 allows XSS via the alt attribute of an IMG element in a truncated e-mail message...

6.1CVSS5.8AI score0.01364EPSS

SaveExploits3References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by