Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
open-xchange appsuite vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2022-29852
OX App Suite up to and including 8.2 allows XSS because BMFreehand10 and image/x-freehand are not blocked.
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.10.5
Open-xchange Open-xchange Appsuite 7.10.6
NA
CVE-2014-8993
Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite prior to 7.4.2-rev40, 7.6.0 prior to 7.6.0-rev32, and 7.6.1 prior to 7.6.1-rev11 allows remote malicious users to inject arbitrary web script or HTML via a crafted XHTML file with the applicatio...
Open-xchange Open-xchange Appsuite 7.6.0
Open-xchange Open-xchange Appsuite 7.6.1
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2022-31469
OX App Suite up to and including 7.10.6 allows XSS via a deep link, as demonstrated by class="deep-link-app" for a /#!!&app=%2e./ URI.
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.10.5
Open-xchange Open-xchange Appsuite 7.10.6
NA
CVE-2014-1679
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite prior to 7.2.2-rev31, 7.4.0 prior to 7.4.0-rev27, and 7.4.1 prior to 7.4.1-rev17 allows remote malicious users to inject arbitrary web script or HTML via the header in an attached SVG file.
Open-xchange Open-xchange Appsuite 7.4.0
Open-xchange Open-xchange Appsuite
Open-xchange Open-xchange Appsuite 7.4.1
5.4
CVSSv3
CVE-2018-5754
Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite prior to 7.8.3-rev12 and 7.8.4 prior to 7.8.4-rev9 allows remote malicious users to inject arbitrary web script or HTML via a crafted presentation file, related to copying content to...
Open-xchange Open-xchange Appsuite 7.8.4
Open-xchange Open-xchange Appsuite 7.8.3
Open-xchange Open-xchange Appsuite
1 EDB exploit
6.5
CVSSv3
CVE-2020-8541
OX App Suite up to and including 7.10.3 allows XXE attacks.
Open-xchange Open-xchange Appsuite 7.10.1
Open-xchange Open-xchange Appsuite 7.10.2
Open-xchange Open-xchange Appsuite 7.10.3
5.4
CVSSv3
CVE-2020-8542
OX App Suite up to and including 7.10.3 allows XSS.
Open-xchange Open-xchange Appsuite 7.10.2
Open-xchange Open-xchange Appsuite 7.10.3
Open-xchange Open-xchange Appsuite 7.10.1
NA
CVE-2014-9466
Open-Xchange (OX) AppSuite and Server prior to 7.4.2-rev42, 7.6.0 prior to 7.6.0-rev36, and 7.6.1 prior to 7.6.1-rev14 does not properly handle directory permissions, which allows remote authenticated users to read files via unspecified vectors, related to the "folder identi...
Open-xchange Open-xchange Appsuite 7.6.0
Open-xchange Open-xchange Appsuite 7.4.2
Open-xchange Open-xchange Appsuite 7.6.1
NA
CVE-2013-3106
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server prior to 6.20.7 rev18, 6.22.0 before rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allow remote malicious users to inject arbitrary web script or HTM...
Open-xchange Open-xchange Appsuite 6.22.1
Open-xchange Open-xchange Server 7.0.2
Open-xchange Open-xchange Appsuite 6.22.0
Open-xchange Open-xchange Server 7.0.1
Open-xchange Open-xchange Appsuite 7.0.1
Open-xchange Open-xchange Server 6.22.1
Open-xchange Open-xchange Appsuite 7.0.2
Open-xchange Open-xchange Server 6.20.7
Open-xchange Open-xchange Appsuite 7.2.0
Open-xchange Open-xchange Appsuite 6.20.7
Open-xchange Open-xchange Server 6.22.0
Open-xchange Open-xchange Server 7.2.0
6.1
CVSSv3
CVE-2016-6846
Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend prior to 7.6.2-rev59, 7.8.0 prior to 7.8.0-rev38, 7.8.2 prior to 7.8.2-rev8; AppSuite frontend prior to 7.6.2-rev47, 7.8.0 prior to 7.8.0-rev30, and 7.8.2 prior to 7.8.2-rev8; Office Web prior to 7.6.2...
Open-xchange Open-xchange Appsuite Backend 7.8.0
Open-xchange Documentconverter-api 7.8.2
Open-xchange Office Web 7.8.2
Open-xchange Office Web 7.6.2
Open-xchange Open-xchange Appsuite Frontend 7.8.0
Open-xchange Open-xchange Appsuite Frontend 7.6.2
Open-xchange Open-xchange Appsuite Backend 7.6.2
Open-xchange Open-xchange Appsuite Backend 7.8.2
Open-xchange Office Web 7.8.0
Open-xchange Open-xchange Appsuite Frontend 7.8.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-0044
remote code execution
CVE-2024-37080
CVE-2024-5182
CVE-2024-4390
CVE-2024-6100
brute force
CVE-2021-47581
file inclusion
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »