open-xchange open-xchange appsuite backend 7.8.0 vulnerabilities and exploits

(subscribe to this query)

6.1

CVSSv3

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend prior to 7.6.2-rev59, 7.8.0 prior to 7.8.0-rev38, 7.8.2 prior to 7.8.2-rev8; AppSuite frontend prior to 7.6.2-rev47, 7.8.0 prior to 7.8.0-rev30, and 7.8.2 prior to 7.8.2-rev8; Office Web prior to 7.6.2...

Open-xchange Open-xchange Appsuite Frontend 7.6.2 Open-xchange Open-xchange Appsuite Backend 7.8.0 Open-xchange Open-xchange Appsuite Backend 7.8.2 Open-xchange Open-xchange Appsuite Backend 7.6.2 Open-xchange Office Web 7.8.0 Open-xchange Open-xchange Appsuite Frontend 7.8.0 Open-xchange Documentconverter-api 7.8.2 Open-xchange Office Web 7.8.2 Open-xchange Office Web 7.6.2 Open-xchange Open-xchange Appsuite Frontend 7.8.2

6.5

CVSSv3

The backend component in Open-Xchange OX App Suite prior to 7.6.3-rev35, 7.8.x prior to 7.8.2-rev38, 7.8.3 prior to 7.8.3-rev41, and 7.8.4 prior to 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management.

Open-xchange Open-xchange Appsuite 7.8.4 Open-xchange Open-xchange Appsuite 7.8.3 Open-xchange Open-xchange Appsuite 7.8.0 Open-xchange Open-xchange Appsuite 7.6.3 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.8.2

1 EDB exploit

6.5

CVSSv3

The backend component in Open-Xchange OX App Suite prior to 7.6.3-rev36, 7.8.x prior to 7.8.2-rev39, 7.8.3 prior to 7.8.3-rev44, and 7.8.4 prior to 7.8.4-rev22 allows remote authenticated users to obtain sensitive information about external guest users via vectors related to the ...

Open-xchange Open-xchange Appsuite 7.8.4 Open-xchange Open-xchange Appsuite 7.8.3 Open-xchange Open-xchange Appsuite 7.6.3 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.8.2 Open-xchange Open-xchange Appsuite 7.8.0

1 EDB exploit

8.8

CVSSv3

The backend component in Open-Xchange OX App Suite prior to 7.6.3-rev36, 7.8.x prior to 7.8.2-rev39, 7.8.3 prior to 7.8.3-rev44, and 7.8.4 prior to 7.8.4-rev22 allows remote malicious users to conduct server-side request forgery (SSRF) attacks via vectors involving non-decimal re...

Open-xchange Open-xchange Appsuite 7.8.4 Open-xchange Open-xchange Appsuite 7.8.3 Open-xchange Open-xchange Appsuite 7.8.2 Open-xchange Open-xchange Appsuite 7.8.0 Open-xchange Open-xchange Appsuite 7.6.3 Open-xchange Open-xchange Appsuite

1 EDB exploit

4.3

CVSSv3

The backend component in Open-Xchange OX App Suite prior to 7.6.3-rev36, 7.8.x prior to 7.8.2-rev39, 7.8.3 prior to 7.8.3-rev44, and 7.8.4 prior to 7.8.4-rev22 does not properly check for folder-to-object association, which allows remote authenticated users to delete arbitrary ta...

Open-xchange Open-xchange Appsuite 7.8.4 Open-xchange Open-xchange Appsuite 7.8.3 Open-xchange Open-xchange Appsuite 7.6.3 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.8.0 Open-xchange Open-xchange Appsuite 7.8.2

1 EDB exploit

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook