open-xchange appsuite vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to crafted "<%" tags.

Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote malicious users to inject arbitrary web script or HTML via the title in a mail filter rule.

Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.0.1

XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote authenticated users to read portions of arbitrary files via vectors related to the SAX builder and the WebDAV interface. NOTE: this issue has be...

Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified oAuth API functions.

Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 7.2.0

Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite prior to 7.4.2-rev33 and 7.6.x prior to 7.6.0-rev16 allows remote malicious users to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds.

Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.6.0 Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.4.0 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.0.2

Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite prior to 7.4.2-rev33 and 7.6.x prior to 7.6.0-rev16 allows remote malicious users to inject arbitrary web script or HTML via a folder publication name.

Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.6.0 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.2.2 Open-xchange Open-xchange Appsuite 7.4.0

Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) an HTML email with crafted CSS code containing wildcards or (2) office documents containing &q...

Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 6.22.1 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 7.2.1 Open-xchange Open-xchange Appsuite 7.2.2

Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite prior to 7.2.2 allow remote authenticated users to inject arbitrary web script or HTML via (1) content with the text/xml MIME type or (2) the Status comment field of an appointment.

Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 6.22.1

CRLF injection vulnerability in Open-Xchange AppSuite prior to 7.2.2, when using AJP in certain conditions, allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet.

Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.2.0 Open-xchange Open-xchange Appsuite 6.20.7 Open-xchange Open-xchange Appsuite 7.0.1 Open-xchange Open-xchange Appsuite 6.22.0 Open-xchange Open-xchange Appsuite 7.0.2 Open-xchange Open-xchange Appsuite 6.22.1

The backend component in Open-Xchange OX App Suite prior to 7.6.3-rev36, 7.8.x prior to 7.8.2-rev39, 7.8.3 prior to 7.8.3-rev44, and 7.8.4 prior to 7.8.4-rev22 allows remote authenticated users to obtain sensitive information about external guest users via vectors related to the ...

Open-xchange Open-xchange Appsuite 7.8.4 Open-xchange Open-xchange Appsuite 7.8.3 Open-xchange Open-xchange Appsuite 7.6.3 Open-xchange Open-xchange Appsuite Open-xchange Open-xchange Appsuite 7.8.2 Open-xchange Open-xchange Appsuite 7.8.0

1 EDB exploit

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook