CVE-2020-12644
Published Aug 31, 2020OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API.
Vendor/product archive
open-xchange / open-xchange_appsuite CVEs
Beta · best-effort157 CVEs tagged to open-xchange / open-xchange_appsuite — 7 Critical, 17 High, 128 Medium, 5 Low, 0 Unrated.
CVE-2020-12643
Published Aug 31, 2020OX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request for a snippet containing an email address.
CVE-2020-8544
Published Jun 16, 2020OX App Suite through 7.10.3 allows SSRF.
CVE-2020-8543
Published Jun 16, 2020OX App Suite through 7.10.3 has Improper Input Validation.
CVE-2020-8542
Published Jun 16, 2020OX App Suite through 7.10.3 allows XSS.
CVE-2020-8541
Published Jun 16, 2020OX App Suite through 7.10.3 allows XXE attacks.
CVE-2019-18846
Published Feb 21, 2020OX App Suite through 7.10.2 allows SSRF.
CVE-2014-5236
Published Jan 31, 2020Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read…
CVE-2014-5238
Published Jan 14, 2020XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6.x before 7.6.0-rev9 allows remote attackers to read arbitrary files and possibly o…
CVE-2019-16717
Published Jan 6, 2020OX App Suite through 7.10.2 has XSS.
CVE-2019-16716
Published Jan 6, 2020OX App Suite through 7.10.2 has Incorrect Access Control.
CVE-2013-7486
Published Jan 2, 2020Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev27 and 7.4.x before 7.4.0-rev20 allows remote attackers to inject arbit…
CVE-2013-7485
Published Jan 2, 2020Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbit…
CVE-2013-6242
Published Jan 2, 2020Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows remote attackers to inject a…
CVE-2019-14227
Published Oct 14, 2019OX App Suite 7.10.1 and 7.10.2 allows XSS.
CVE-2019-14226
Published Oct 14, 2019OX App Suite through 7.10.2 has Insecure Permissions.
CVE-2019-14225
Published Oct 14, 2019OX App Suite 7.10.1 and 7.10.2 allows SSRF.
CVE-2019-11806
Published Aug 20, 2019OX App Suite 7.10.1 and earlier has Insecure Permissions.
CVE-2019-11522
Published Aug 20, 2019OX App Suite 7.10.0 to 7.10.2 allows XSS.
CVE-2019-11521
Published Aug 20, 2019OX App Suite 7.10.1 allows Content Spoofing.
CVE-2019-7159
Published Jun 18, 2019OX App Suite 7.10.1 and earlier allows Information Exposure.
CVE-2019-7158
Published Jun 17, 2019OX App Suite 7.10.0 and earlier has Incorrect Access Control.
CVE-2017-13667
Published May 23, 2019OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.
CVE-2017-13668
Published May 23, 2019OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-5213
Published May 23, 2019Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
Showing 51-75 of 157 CVEsPage 3 of 7