4
CVSSv2

CVE-2017-17062

Published: 16/06/2018 Updated: 03/10/2019
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 405
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Vulnerability Summary

The backend component in Open-Xchange OX App Suite prior to 7.6.3-rev35, 7.8.x prior to 7.8.2-rev38, 7.8.3 prior to 7.8.3-rev41, and 7.8.4 prior to 7.8.4-rev19 allows remote authenticated users to save arbitrary user attributes by leveraging improper privilege management.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

open-xchange open-xchange appsuite 7.8.4

open-xchange open-xchange appsuite 7.8.3

open-xchange open-xchange appsuite 7.8.0

open-xchange open-xchange appsuite 7.6.3

open-xchange open-xchange appsuite

open-xchange open-xchange appsuite 7.8.2

Exploits

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 55872 (Bug ID) Vulnerability type: Cross-Site Scripting (CWE-80) Vulnerable version: 784 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 763-rev30, 782-rev30, 783-rev36, 784-rev18 Vendor notification ...
OX App Suite versions 784 and below suffer from cross site scripting, improper privilege management, content spoofing, server-side request forgery, and path traversal vulnerabilities ...