Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
open-xchange ox app suite vulnerabilities and exploits
(subscribe to this query)
5.3
CVSSv3
CVE-2021-38376
OX App Suite up to and including 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call.
Open-xchange Ox App Suite
4.3
CVSSv3
CVE-2021-38378
OX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified By response to show a person's name.
Open-xchange Ox App Suite
9.8
CVSSv3
CVE-2022-29851
documentconverter in OX App Suite up to and including 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2021-44209
OX App Suite up to and including 7.10.5 allows XSS via an HTML 5 element such as AUDIO.
Open-xchange Ox App Suite
5.4
CVSSv3
CVE-2021-44211
OX App Suite up to and including 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2021-44213
OX App Suite up to and including 7.10.5 allows XSS via uuencoding in a multipart/alternative message.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2021-44208
OX App Suite up to and including 7.10.5 allows XSS via an unknown system message in Chat.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2021-44210
OX App Suite up to and including 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2021-44212
OX App Suite up to and including 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring.
Open-xchange Ox App Suite
6.1
CVSSv3
CVE-2022-31468
OX App Suite up to and including 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter.
Open-xchange Ox App Suite
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
inject
CVE-2024-34001
CVE-2024-37018
LFI
CVE-2024-1275
CVE-2024-1086
CSRF
CVE-2024-31030
CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »