open-xchange open-xchange appsuite 6.22.1 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server prior to 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote malicious users to inject arbitrary HTTP headers and conduct open redirect attacks by levera...

Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Server 6.22.1 Open-xchange Open-xchange Server 7.0.1 Open-xchange Open-xchange Server 6.22.0 Open-xchange Open-xchange Server 7.0.2

4.3

CVSSv2

CRLF injection vulnerability in Open-Xchange AppSuite prior to 7.2.2, when using AJP in certain conditions, allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 6.22.1

3.5

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite prior to 7.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) content with the text/xml MIME type or (2) the Status comment field of an appointment.

Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 6.22.1

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server prior to 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allows remote authenticated users to inject arbitrary web script or HTML via a delivery=view actio...

Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Server 7.0.1 Open-xchange Open-xchange Server 7.0.2 Open-xchange Open-xchange Server 6.22.0 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Server 7.2.0 Open-xchange Open-xchange Server 6.22.1 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.2.0

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server prior to 6.20.7 rev16, 6.22.0 before rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allow remote malicious users to inject arbitrary web script or HTML via (1) a javascri...

Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Server 7.0.1 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Server 6.20.7 Open-xchange Open-xchange Server 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Server 6.22.1 Open-xchange Open-xchange Server 7.0.2

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server prior to 6.20.7 rev18, 6.22.0 before rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allow remote malicious users to inject arbitrary web script or HTM...

Open-xchange Open-xchange Server 7.0.2 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Server 6.22.0 Open-xchange Open-xchange Server 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Server 7.2.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Server 6.20.7 Open-xchange Open-xchange Server 6.22.1

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) an HTML email with crafted CSS code containing wildcards or (2) office documents containing &q...

Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 7.2.2

4

CVSSv2

XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote authenticated users to read portions of arbitrary files via vectors related to the SAX builder and the WebDAV interface. NOTE: this issue has be...

Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags.

Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified oAuth API functions.

Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 7.2.0

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook