Ox App Suite Security Vulnerabilities and Issues — Ox App Suite CVE List

Lucene search

Open-xchangeOx App Suite

5 matches found

CVE•added 2023/04/15 2:15 a.m.•272 views

CVE-2022-43699

OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be attacked by an adversary who controls the DNS records of an external domain (found in the host part of an e-mail address).

4.3CVSS4.7AI score0.00065EPSS

CVE•added 2023/04/15 2:15 a.m.•199 views

CVE-2022-43697

OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob.

6.1CVSS5.9AI score0.00098EPSS

CVE•added 2023/04/15 2:15 a.m.•46 views

CVE-2022-43698

OX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list.

4.3CVSS4.7AI score0.00065EPSS

CVE•added 2023/04/15 2:15 a.m.•43 views

CVE-2022-43696

OX App Suite before 7.10.6-rev20 allows XSS via upsell ads.

6.1CVSS5.9AI score0.00098EPSS

CVE•added 2023/04/16 2:15 a.m.•42 views

CVE-2022-37306

OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger.

6.1CVSS5.9AI score0.00166EPSS