Open-xchange vulnerabilities

Products

• Appsuite 157
• Ox App Suite 48
• Dovecot 16
• Appsuite Backend 14
• Server 13
• Ox Guard 11
• Appsuite Frontend 8
• Appsuite Office 4
• Pdns 4
• App Suite 3
• Documents 3
• Open-xchange 2

Newest

• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +14 more +16 more An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE... CVE-2026-42006 Fix available 4.3 MediumMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl... CVE-2026-40020 Fix available 3.1 LowMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass... CVE-2026-40016 Fix available 5.3 MediumMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS... CVE-2026-33603 Fix available 6.8 MediumMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +3 more +5 more When safe filter is used with variable expansion, all following pipelines on the same string are... CVE-2026-27851 Fix available 7.4 HighMay 12, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP... CVE-2026-27860 Fix available 3.7 LowMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too... CVE-2026-27859 Fix available 5.3 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 more Attacker can send a specifically crafted message before authentication that causes managesieve to... CVE-2026-27858 Fix available 7.5 HighMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 more Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory... CVE-2026-27857 Fix available 4.3 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 more Doveadm credentials are verified using direct comparison which is susceptible to timing oracle... CVE-2026-27856 Fix available 7.4 HighMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth... CVE-2026-27855 Fix available 6.8 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +4 more +6 more Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.... CVE-2026-24031 Public exploitFix available 7.7 HighMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more When dovecot has been configured to use per-domain passwd files, and they are placed one path... CVE-2026-0394 Fix available 5.3 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro, red hat enterprise linux 10 +16 more +18 more ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be... CVE-2025-59032 Fix available 7.5 HighMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more Dovecot has provided a script to use for attachment to text conversion. This script unsafely... CVE-2025-59031 Fix available 4.3 MediumMarch 27, 2026
• dovecot, open-xchange gmbh ox dovecot pro +1 more When sending invalid base64 SASL data, login process is disconnected from the auth server,... CVE-2025-59028 Fix available 5.3 MediumMarch 27, 2026
• open-xchange ox dovecot pro Very large headers can cause resource exhaustion when parsing message. The message-parser... CVE-2024-23185 Fix available 7.5 HighAugust 17, 2024
• mozilla firefox, firefox esr, thunderbird +5 more +7 more PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF CVE-2024-4367 Public exploitFix available EPSS 70.7% 8.8 HighMay 7, 2024
• open-xchange ox app suite E-Mails exported as PDF were stored in a cache that did not consider specific session information... CVE-2024-23193 5.3 MediumMay 6, 2024
• open-xchange app suite, open-xchange gmbh ox app suite +1 more Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in... CVE-2024-23188 6.5 MediumMay 6, 2024
• open-xchange ox app suite Content-ID based embedding of resources in E-Mails could be abused to trigger client-side script... CVE-2024-23187 6.5 MediumMay 6, 2024
• open-xchange ox app suite E-Mail containing malicious display-name information could trigger client-side script execution... CVE-2024-23186 6.5 MediumMay 6, 2024
• open-xchange appsuite, open-xchange gmbh ox app suite +1 more References to the "app loader" functionality could contain redirects to unexpected locations.... CVE-2023-41708 5.4 MediumFebruary 12, 2024
• open-xchange gmbh ox app suite, open-xchange appsuite +1 more Processing of user-defined mail search expressions is not limited. Availability of OX App Suite... CVE-2023-41707 6.5 MediumFebruary 12, 2024
• open-xchange gmbh ox app suite, open-xchange appsuite +1 more Processing time of drive search expressions now gets monitored, and the related request is... CVE-2023-41706 6.5 MediumFebruary 12, 2024
• open-xchange gmbh ox app suite, open-xchange appsuite +1 more Processing of user-defined DAV user-agent strings is not limited. Availability of OX App Suite... CVE-2023-41705 6.5 MediumFebruary 12, 2024
• open-xchange appsuite, open-xchange gmbh ox app suite +1 more Processing of CID references at E-Mail can be abused to inject malicious script code that passes... CVE-2023-41704 7.1 HighFebruary 12, 2024
• open-xchange appsuite, open-xchange gmbh ox app suite +1 more User ID references at mentions in document comments were not correctly sanitized. Script code... CVE-2023-41703 6.1 MediumFebruary 12, 2024
• open-xchange ox app suite User-defined script code could be stored for a upsell related shop URL. This code was not... CVE-2023-41710 5.4 MediumJanuary 8, 2024
• open-xchange ox app suite Users were able to define disclaimer texts for an upsell shop dialog that would contain script... CVE-2023-29052 5.4 MediumJanuary 8, 2024
• open-xchange ox app suite User-defined OXMF templates could be used to access a limited part of the internal OX App Suite... CVE-2023-29051 8.1 HighJanuary 8, 2024
• open-xchange ox app suite The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter... CVE-2023-29050 7.6 HighJanuary 8, 2024
• open-xchange ox app suite The "upsell" widget at the portal page could be abused to inject arbitrary script code. Attackers... CVE-2023-29049 5.4 MediumJanuary 8, 2024
• open-xchange ox app suite A component for parsing OXMF templates could be abused to execute arbitrary system commands that... CVE-2023-29048 8.8 HighJanuary 8, 2024
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Imageconverter API endpoints provided methods that were not sufficiently validating and... CVE-2023-29047 5.3 MediumNovember 2, 2023
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Connections to external data sources, like e-mail autoconfiguration, were not terminated in case... CVE-2023-29046 4.3 MediumNovember 2, 2023
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Documents operations, in this case "drawing", could be manipulated to contain invalid data types,... CVE-2023-29045 5.4 MediumNovember 2, 2023
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Documents operations could be manipulated to contain invalid data types, possibly script code.... CVE-2023-29044 5.4 MediumNovember 2, 2023
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Presentations may contain references to images, which are user-controlled, and could include... CVE-2023-29043 6.1 MediumNovember 2, 2023
• open-xchange ox guard, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not... CVE-2023-26456 5.4 MediumNovember 2, 2023
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers... CVE-2023-26455 5.6 MediumNovember 2, 2023
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Requests to fetch image metadata could be abused to include SQL queries that would be executed... CVE-2023-26454 7.6 HighNovember 2, 2023
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Requests to cache an image could be abused to include SQL queries that would be executed... CVE-2023-26453 7.6 HighNovember 2, 2023
• open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Requests to cache an image and return its metadata could be abused to include SQL queries that... CVE-2023-26452 7.6 HighNovember 2, 2023
• open-xchange appsuite backend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Functions with insufficient randomness were used to generate authorization tokens of the... CVE-2023-26451 7.5 HighAugust 2, 2023
• open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more The "OX Count" web service did not specify a media-type when processing responses by external... CVE-2023-26450 5.4 MediumAugust 2, 2023
• open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more The "OX Chat" web service did not specify a media-type when processing responses by external... CVE-2023-26449 5.4 MediumAugust 2, 2023
• open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more Custom log-in and log-out locations are used-defined as jslob but were not checked to contain... CVE-2023-26448 5.4 MediumAugust 2, 2023
• open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more The "upsell" widget for the portal allows to specify a product description. This description... CVE-2023-26447 5.4 MediumAugust 2, 2023
• open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 more The users clientID at "application passwords" was not sanitized or escaped before being added to... CVE-2023-26446 5.4 MediumAugust 2, 2023
• Show olderLoading…