Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
open-xchange ox app suite vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-31468
OX App Suite up to and including 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter.
Open-xchange Ox App Suite
NA
CVE-2022-29851
documentconverter in OX App Suite up to and including 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document.
Open-xchange Ox App Suite
NA
CVE-2022-24405
OX App Suite up to and including 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API.
Open-xchange Ox App Suite
NA
CVE-2022-24406
OX App Suite up to and including 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to injection into internal Documentconverter API calls.
Open-xchange Ox App Suite
NA
CVE-2022-23100
OX App Suite up to and including 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).
Open-xchange Ox App Suite
NA
CVE-2022-23101
OX App Suite up to and including 7.10.6 allows XSS via appHandler in a deep link in an e-mail message.
Open-xchange Ox App Suite
NA
CVE-2022-23099
OX App Suite up to and including 7.10.6 allows XSS by forcing block-wise read.
Open-xchange App Suite
4.3
CVSSv2
CVE-2021-44212
OX App Suite up to and including 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring.
Open-xchange Ox App Suite
4.3
CVSSv2
CVE-2021-44213
OX App Suite up to and including 7.10.5 allows XSS via uuencoding in a multipart/alternative message.
Open-xchange Ox App Suite
4.3
CVSSv2
CVE-2021-44208
OX App Suite up to and including 7.10.5 allows XSS via an unknown system message in Chat.
Open-xchange Ox App Suite
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »