open-xchange open-xchange appsuite 7.4.1 vulnerabilities and exploits

(subscribe to this query)

383

VMScore

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite prior to 7.2.2-rev31, 7.4.0 prior to 7.4.0-rev27, and 7.4.1 prior to 7.4.1-rev17 allows remote malicious users to inject arbitrary web script or HTML via the header in an attached SVG file.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 7.4.1

383

VMScore

The password recovery service in Open-Xchange AppSuite prior to 7.2.2-rev20, 7.4.1 prior to 7.4.1-rev11, and 7.4.2 prior to 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote ...

Open-xchange Open-xchange Appsuite 7.4.2 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.4.1

383

VMScore

The E-Mail autoconfiguration feature in Open-Xchange AppSuite prior to 7.2.2-rev20, 7.4.1 prior to 7.4.1-rev11, and 7.4.2 prior to 7.4.2-rev13 places a password in a GET request, which allows remote malicious users to obtain sensitive information by reading (1) web-server access ...

Open-xchange Open-xchange Appsuite 7.4.2 Open-xchange Open-xchange Appsuite 7.4.1 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0

383

VMScore

Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 prior to 7.4.1-rev11 and 7.4.2 prior to 7.4.2-rev13 allows remote malicious users to inject arbitrary web script or HTML via a Drive filename that is not properly handled during use of the composer to add an ...

Open-xchange Open-xchange Appsuite 7.4.2 Open-xchange Open-xchange Appsuite 7.4.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.2.1

383

VMScore

Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 7.4.1 prior to 7.4.1-rev10 and 7.4.2 prior to 7.4.2-rev8 allows remote malicious users to inject arbitrary web script or HTML via the subject of an email, involving 'the aria "tags&qu...

Open-xchange Open-xchange Appsuite 7.4.2 Open-xchange Open-xchange Appsuite 7.4.1

383

VMScore

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified oAuth API functions.

Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 7.2.0

383

VMScore

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote malicious users to inject arbitrary web script or HTML via the title in a mail filter rule.

Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.0.1

383

VMScore

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags.

Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7

356

VMScore

XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote authenticated users to read portions of arbitrary files via vectors related to the SAX builder and the WebDAV interface. NOTE: this issue has be...

Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook