Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
open-xchange open-xchange appsuite 7.4.2 vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2014-5236
Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite prior to 7.4.2-rev10 and 7.6.x prior to 7.6.0-rev10 allow remote malicious users to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDo...
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.4.2
Open-xchange Open-xchange Appsuite 7.6.0
6.8
CVSSv2
CVE-2014-5238
XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite prior to 7.4.2-rev11 and 7.6.x prior to 7.6.0-rev9 allows remote malicious users to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document.
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.4.2
Open-xchange Open-xchange Appsuite 7.6.0
4.3
CVSSv2
CVE-2014-2392
The E-Mail autoconfiguration feature in Open-Xchange AppSuite prior to 7.2.2-rev20, 7.4.1 prior to 7.4.1-rev11, and 7.4.2 prior to 7.4.2-rev13 places a password in a GET request, which allows remote malicious users to obtain sensitive information by reading (1) web-server access ...
Open-xchange Open-xchange Appsuite 7.4.2
Open-xchange Open-xchange Appsuite 7.4.1
Open-xchange Open-xchange Appsuite 7.2.1
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.2.0
4.3
CVSSv2
CVE-2014-2391
The password recovery service in Open-Xchange AppSuite prior to 7.2.2-rev20, 7.4.1 prior to 7.4.1-rev11, and 7.4.2 prior to 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote ...
Open-xchange Open-xchange Appsuite 7.4.2
Open-xchange Open-xchange Appsuite 7.2.1
Open-xchange Open-xchange Appsuite 7.2.0
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.4.1
4.3
CVSSv2
CVE-2014-2393
Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 prior to 7.4.1-rev11 and 7.4.2 prior to 7.4.2-rev13 allows remote malicious users to inject arbitrary web script or HTML via a Drive filename that is not properly handled during use of the composer to add an ...
Open-xchange Open-xchange Appsuite 7.4.2
Open-xchange Open-xchange Appsuite 7.4.1
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.2.0
Open-xchange Open-xchange Appsuite 7.2.1
4
CVSSv2
CVE-2014-9466
Open-Xchange (OX) AppSuite and Server prior to 7.4.2-rev42, 7.6.0 prior to 7.6.0-rev36, and 7.6.1 prior to 7.6.1-rev14 does not properly handle directory permissions, which allows remote authenticated users to read files via unspecified vectors, related to the "folder identi...
Open-xchange Open-xchange Appsuite 7.6.1
Open-xchange Open-xchange Appsuite 7.4.2
Open-xchange Open-xchange Appsuite 7.6.0
4.3
CVSSv2
CVE-2014-2077
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 7.4.1 prior to 7.4.1-rev10 and 7.4.2 prior to 7.4.2-rev8 allows remote malicious users to inject arbitrary web script or HTML via the subject of an email, involving 'the aria "tags&qu...
Open-xchange Open-xchange Appsuite 7.4.2
Open-xchange Open-xchange Appsuite 7.4.1
4.3
CVSSv2
CVE-2014-5234
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite prior to 7.4.2-rev33 and 7.6.x prior to 7.6.0-rev16 allows remote malicious users to inject arbitrary web script or HTML via a folder publication name.
Open-xchange Open-xchange Appsuite 7.2.0
Open-xchange Open-xchange Appsuite 7.2.1
Open-xchange Open-xchange Appsuite 6.22.0
Open-xchange Open-xchange Appsuite 6.22.1
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.6.0
Open-xchange Open-xchange Appsuite 7.0.1
Open-xchange Open-xchange Appsuite 7.0.2
Open-xchange Open-xchange Appsuite 6.20.7
Open-xchange Open-xchange Appsuite 7.2.2
Open-xchange Open-xchange Appsuite 7.4.0
4.3
CVSSv2
CVE-2014-5235
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite prior to 7.4.2-rev33 and 7.6.x prior to 7.6.0-rev16 allows remote malicious users to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds.
Open-xchange Open-xchange Appsuite 6.22.0
Open-xchange Open-xchange Appsuite 6.22.1
Open-xchange Open-xchange Appsuite 7.6.0
Open-xchange Open-xchange Appsuite 7.2.0
Open-xchange Open-xchange Appsuite 7.2.1
Open-xchange Open-xchange Appsuite 6.20.7
Open-xchange Open-xchange Appsuite 7.2.2
Open-xchange Open-xchange Appsuite 7.4.0
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.0.1
Open-xchange Open-xchange Appsuite 7.0.2
5
CVSSv2
CVE-2014-2078
The backend in Open-Xchange (OX) AppSuite 7.4.2 prior to 7.4.2-rev9 allows remote malicious users to obtain sensitive information about user email addresses in opportunistic circumstances by leveraging a failure in e-mail auto configuration for external accounts.
Open-xchange Open-xchange Appsuite 7.4.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race condition
CVE-2024-4249
CVE-2024-4244
CVE-2023-20198
TCP
CVE-2022-48648
CVE-2022-48636
CVE-2024-21345
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »