Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Open-xchange Subscribe
Total 193 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17061 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 3.5 LOW 5.4 MEDIUM
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-5212 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 7.5 HIGH 9.8 CRITICAL
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.
CVE-2017-5213 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 4.3 MEDIUM 6.1 MEDIUM
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-9809 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 5.0 MEDIUM 5.3 MEDIUM
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure.
CVE-2017-8777 1 Open-xchange 1 Ox Cloud 2019-05-23 6.5 MEDIUM 7.2 HIGH
Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization.
CVE-2017-5863 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 7.5 HIGH 9.8 CRITICAL
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
CVE-2017-6912 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 6.5 MEDIUM 8.8 HIGH
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
CVE-2017-5864 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 4.3 MEDIUM 6.1 MEDIUM
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-8341 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 5.0 MEDIUM 5.3 MEDIUM
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.
CVE-2017-8340 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 6.5 MEDIUM 8.8 HIGH
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
CVE-2017-9808 1 Open-xchange 1 Open-xchange Appsuite 2019-05-23 4.3 MEDIUM 6.1 MEDIUM
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-12884 1 Open-xchange 1 Open-xchange Appsuite 2019-05-10 5.0 MEDIUM 7.5 HIGH
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure.
CVE-2017-12885 1 Open-xchange 1 Open-xchange Appsuite 2019-05-10 4.3 MEDIUM 6.1 MEDIUM
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2014-2078 1 Open-xchange 1 Open-xchange Appsuite 2019-04-26 5.0 MEDIUM 5.3 MEDIUM
The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email addresses in opportunistic circumstances by leveraging a failure in e-mail auto configuration for external accounts.
CVE-2018-13103 1 Open-xchange 1 Open-xchange Appsuite 2019-03-27 5.5 MEDIUM 5.4 MEDIUM
OX App Suite 7.8.4 and earlier allows SSRF.
CVE-2018-13104 1 Open-xchange 1 Open-xchange Appsuite 2019-03-26 3.5 LOW 5.4 MEDIUM
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID)
CVE-2018-12611 1 Open-xchange 1 Open-xchange Appsuite 2019-01-31 4.3 MEDIUM 6.1 MEDIUM
OX App Suite 7.8.4 and earlier allows Directory Traversal.
CVE-2018-12610 1 Open-xchange 1 Open-xchange Appsuite 2019-01-31 5.0 MEDIUM 5.3 MEDIUM
OX App Suite 7.8.4 and earlier allows Information Exposure.
CVE-2018-12609 1 Open-xchange 1 Open-xchange Appsuite 2019-01-31 4.0 MEDIUM 6.5 MEDIUM
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery.
CVE-2014-5237 1 Open-xchange 1 App Suite 2018-12-18 4.3 MEDIUM N/A
Server-side request forgery (SSRF) vulnerability in the documentconverter component in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allows remote attackers to trigger requests to arbitrary servers and embed arbitrary images via a URL in an embedded image in a Text document, which is not properly handled by the image preview.