Filtered by vendor Open-xchange
Subscribe
Total
193 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2017-17061 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 3.5 LOW | 5.4 MEDIUM |
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). | |||||
CVE-2017-5212 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 7.5 HIGH | 9.8 CRITICAL |
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control. | |||||
CVE-2017-5213 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 4.3 MEDIUM | 6.1 MEDIUM |
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS). | |||||
CVE-2017-9809 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 5.0 MEDIUM | 5.3 MEDIUM |
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure. | |||||
CVE-2017-8777 | 1 Open-xchange | 1 Ox Cloud | 2019-05-23 | 6.5 MEDIUM | 7.2 HIGH |
Open-Xchange GmbH OX Cloud Plugins 1.4.0 and earlier is affected by: Missing Authorization. | |||||
CVE-2017-5863 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 7.5 HIGH | 9.8 CRITICAL |
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. | |||||
CVE-2017-6912 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 6.5 MEDIUM | 8.8 HIGH |
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. | |||||
CVE-2017-5864 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 4.3 MEDIUM | 6.1 MEDIUM |
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS). | |||||
CVE-2017-8341 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 5.0 MEDIUM | 5.3 MEDIUM |
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing. | |||||
CVE-2017-8340 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 6.5 MEDIUM | 8.8 HIGH |
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control. | |||||
CVE-2017-9808 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-23 | 4.3 MEDIUM | 6.1 MEDIUM |
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). | |||||
CVE-2017-12884 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-10 | 5.0 MEDIUM | 7.5 HIGH |
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure. | |||||
CVE-2017-12885 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-05-10 | 4.3 MEDIUM | 6.1 MEDIUM |
OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS). | |||||
CVE-2014-2078 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-04-26 | 5.0 MEDIUM | 5.3 MEDIUM |
The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email addresses in opportunistic circumstances by leveraging a failure in e-mail auto configuration for external accounts. | |||||
CVE-2018-13103 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-03-27 | 5.5 MEDIUM | 5.4 MEDIUM |
OX App Suite 7.8.4 and earlier allows SSRF. | |||||
CVE-2018-13104 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-03-26 | 3.5 LOW | 5.4 MEDIUM |
OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID) | |||||
CVE-2018-12611 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-01-31 | 4.3 MEDIUM | 6.1 MEDIUM |
OX App Suite 7.8.4 and earlier allows Directory Traversal. | |||||
CVE-2018-12610 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-01-31 | 5.0 MEDIUM | 5.3 MEDIUM |
OX App Suite 7.8.4 and earlier allows Information Exposure. | |||||
CVE-2018-12609 | 1 Open-xchange | 1 Open-xchange Appsuite | 2019-01-31 | 4.0 MEDIUM | 6.5 MEDIUM |
OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery. | |||||
CVE-2014-5237 | 1 Open-xchange | 1 App Suite | 2018-12-18 | 4.3 MEDIUM | N/A |
Server-side request forgery (SSRF) vulnerability in the documentconverter component in Open-Xchange (OX) AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allows remote attackers to trigger requests to arbitrary servers and embed arbitrary images via a URL in an embedded image in a Text document, which is not properly handled by the image preview. |