open-xchange open-xchange appsuite 7.6.0 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite prior to 7.4.2-rev40, 7.6.0 prior to 7.6.0-rev32, and 7.6.1 prior to 7.6.1-rev11 allows remote malicious users to inject arbitrary web script or HTML via a crafted XHTML file with the applicatio...

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.6.0 Open-xchange Open-xchange Appsuite 7.6.1

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX) AppSuite prior to 7.4.2-rev10 and 7.6.x prior to 7.6.0-rev10 allow remote malicious users to read application files via a full pathname in a crafted (1) OLE Object or (2) image in an OpenDo...

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.4.2 Open-xchange Open-xchange Appsuite 7.6.0

XML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite prior to 7.4.2-rev11 and 7.6.x prior to 7.6.0-rev9 allows remote malicious users to read arbitrary files and possibly other unspecified impact via a crafted OpenDocument Text document.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.4.2 Open-xchange Open-xchange Appsuite 7.6.0

SQL injection vulnerability in Open-Xchange (OX) AppSuite prior to 7.4.2-rev36 and 7.6.x prior to 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call.

Open-xchange Open-xchange Appsuite 7.6.0 Open-xchange Open-xchange Appsuite

Open-Xchange (OX) AppSuite and Server prior to 7.4.2-rev42, 7.6.0 prior to 7.6.0-rev36, and 7.6.1 prior to 7.6.1-rev14 does not properly handle directory permissions, which allows remote authenticated users to read files via unspecified vectors, related to the "folder identi...

Open-xchange Open-xchange Appsuite 7.6.1 Open-xchange Open-xchange Appsuite 7.4.2 Open-xchange Open-xchange Appsuite 7.6.0

Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite prior to 7.4.2-rev33 and 7.6.x prior to 7.6.0-rev16 allows remote malicious users to inject arbitrary web script or HTML via a folder publication name.

Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.6.0 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.4.0

Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite prior to 7.4.2-rev33 and 7.6.x prior to 7.6.0-rev16 allows remote malicious users to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds.

Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.6.0 Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.0.2

Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite prior to 7.4.2-rev43, 7.6.0-rev38, and 7.6.1-rev21.

Open-xchange Open-xchange Appsuite 7.6.1 Open-xchange Open-xchange Appsuite 7.6.0 Open-xchange Open-xchange Server 6.0 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Server 6.22.13 Open-xchange Open-xchange Server 6.22.12

Server-side request forgery (SSRF) vulnerability in the documentconverter component in Open-Xchange (OX) AppSuite prior to 7.4.2-rev10 and 7.6.x prior to 7.6.0-rev10 allows remote malicious users to trigger requests to arbitrary servers and embed arbitrary images via a URL in an ...

Open-xchange App Suite 7.4.2 Open-xchange App Suite 7.6.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook