Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
open-xchange ox app suite 7.10.6 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-29851
documentconverter in OX App Suite up to and including 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file conversion may occur for an EPS document that is disguised as a PDF document.
Open-xchange Ox App Suite
NA
CVE-2022-23100
OX App Suite up to and including 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).
Open-xchange Ox App Suite
NA
CVE-2022-23101
OX App Suite up to and including 7.10.6 allows XSS via appHandler in a deep link in an e-mail message.
Open-xchange Ox App Suite
NA
CVE-2022-23099
OX App Suite up to and including 7.10.6 allows XSS by forcing block-wise read.
Open-xchange App Suite
NA
CVE-2022-24405
OX App Suite up to and including 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API.
Open-xchange Ox App Suite
NA
CVE-2022-24406
OX App Suite up to and including 7.10.6 allows SSRF because multipart/form-data boundaries are predictable, and this can lead to injection into internal Documentconverter API calls.
Open-xchange Ox App Suite
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4