Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
open-xchange ox app suite 7.10.5 vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2021-33491
OX App Suite up to and including 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2022-37309
OX App Suite up to and including 7.10.6 allows XSS via script code within a contact that has an e-mail address but lacks a name.
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.10.5
Open-xchange Open-xchange Appsuite 7.10.6
6.1
CVSSv3
CVE-2022-37310
OX App Suite up to and including 7.10.6 allows XSS via a malicious capability to the metrics or help module, as demonstrated by a /#!!&app=io.ox/files&cap= URI.
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.10.5
Open-xchange Open-xchange Appsuite 7.10.6
6.1
CVSSv3
CVE-2022-37308
OX App Suite up to and including 7.10.6 allows XSS via HTML in text/plain e-mail messages.
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.10.5
Open-xchange Open-xchange Appsuite 7.10.6
6.1
CVSSv3
CVE-2022-31469
OX App Suite up to and including 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /#!!&app=%2e./ URI.
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.10.5
Open-xchange Open-xchange Appsuite 7.10.6
6.1
CVSSv3
CVE-2022-37307
OX App Suite up to and including 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature.
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.10.5
Open-xchange Open-xchange Appsuite 7.10.6
6.1
CVSSv3
CVE-2021-44213
OX App Suite up to and including 7.10.5 allows XSS via uuencoding in a multipart/alternative message.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2021-44212
OX App Suite up to and including 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2021-44210
OX App Suite up to and including 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2021-44208
OX App Suite up to and including 7.10.5 allows XSS via an unknown system message in Chat.
Open-xchange Ox App Suite
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
TCP
CVE-2024-4577
CVE-2024-2695
CVE-2024-31870
injection
CVE-2024-3813
arbitrary code
CVE-2024-27801
CVE-2024-30120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »