Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
open-xchange appsuite vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2021-23929
OX App Suite up to and including 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI.
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2021-23930
OX App Suite up to and including 7.10.4 allows XSS via use of the conversion API for a distributedFile.
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2021-23931
OX App Suite up to and including 7.10.4 allows XSS via an inline binary file.
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2021-23932
OX App Suite up to and including 7.10.4 allows XSS via an inline image with a crafted filename.
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2016-6843
An issue exists in Open-Xchange OX App Suite prior to 7.8.2-rev8. Script code can be injected to contact names. When adding those contacts to a group, the script code gets executed in the context of the user which creates or changes the group by using autocomplete. In most cases ...
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2016-6844
An issue exists in Open-Xchange OX App Suite prior to 7.8.2-rev8. Script code within SVG files is maintained when opening such files "in browser" based on our Mail or Drive app. In case of "a" tags, this may include link targets with base64 encoded "data&...
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2016-6845
An issue exists in Open-Xchange OX App Suite prior to 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an malicious user to provide hyperlinks that may execute script cod...
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2016-6847
An issue exists in Open-Xchange OX App Suite prior to 7.8.2-rev8. SVG files can be used as mp3 album covers. In case their XML structure contains script code, that code may get executed when calling the related cover URL. Malicious script code can be executed within a user's...
Open-xchange Open-xchange Appsuite
6.1
CVSSv3
CVE-2016-6850
An issue exists in Open-Xchange OX App Suite prior to 7.8.2-rev8. SVG files can be used as profile pictures. In case their XML structure contains iframes and script code, that code may get executed when calling the related picture URL or viewing the related person's image wi...
Open-xchange Open-xchange Appsuite
4.3
CVSSv3
CVE-2017-15029
Open-Xchange GmbH OX App Suite 7.8.4 and previous versions is affected by: SSRF.
Open-xchange Open-xchange Appsuite
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581
reflected XSS
CVE-2024-26925
CVE-2024-27956
LFI
CVE-2024-3607
CVE-2024-3107
CVE-2024-3295
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »