Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Open-xchange
Appsuite

Open-xchange Appsuite vulnerabilities

Known exploitedIn KEVPublic exploitFix available

open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet ...CVE-2021-374036.1 MediumJuly 22, 2021
open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that...CVE-2021-374026.1 MediumJuly 22, 2021
open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet ...CVE-2021-266986.1 MediumJuly 22, 2021
open-xchange appsuiteOX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature,...CVE-2020-289456.1 MediumMay 3, 2021
open-xchange appsuiteOX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position...CVE-2021-319346.1 MediumApril 30, 2021
open-xchange appsuiteOX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common...CVE-2021-319356.1 MediumApril 30, 2021
open-xchange appsuiteOX App Suite 7.10.4 and earlier allows SSRF via a snippet.CVE-2020-289436.5 MediumApril 30, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth...CVE-2021-239276.4 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.CVE-2021-239286.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded...CVE-2021-239296.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile.CVE-2021-239306.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via an inline binary file.CVE-2021-239316.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename.CVE-2021-239326.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL.CVE-2021-239336.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code.CVE-2021-239346.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via an appointment in which the location contains...CVE-2021-239356.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via the subject of a task.CVE-2021-239366.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the ...CVE-2020-247016.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names...CVE-2020-247005.4 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.CVE-2020-150044.8 MediumOctober 23, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address...CVE-2020-150034.3 MediumOctober 23, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.CVE-2020-15002Public exploit5.0 MediumOctober 23, 2020
open-xchange appsuiteOX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.CVE-2020-126465.4 MediumAugust 31, 2020
open-xchange appsuiteOX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User...CVE-2020-126459.8 CriticalAugust 31, 2020
open-xchange appsuiteOX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list...CVE-2020-126445.0 MediumAugust 31, 2020
open-xchange appsuiteOX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request...CVE-2020-126434.3 MediumAugust 31, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows SSRF.CVE-2020-85446.5 MediumJune 16, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows XXE attacks.CVE-2020-85416.5 MediumJune 16, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows XSS.CVE-2020-85425.4 MediumJune 16, 2020
open-xchange appsuiteOX App Suite through 7.10.3 has Improper Input Validation.CVE-2020-85437.5 HighJune 16, 2020
open-xchange appsuiteOX App Suite through 7.10.2 allows SSRF.CVE-2019-188465.0 MediumFebruary 21, 2020
open-xchange appsuiteMultiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange (OX)...CVE-2014-52367.5 HighJanuary 31, 2020
open-xchange appsuiteXML external entity (XXE) vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev11 and 7.6...CVE-2014-52387.8 HighJanuary 14, 2020
open-xchange appsuiteOX App Suite through 7.10.2 has Incorrect Access Control.CVE-2019-167166.6 MediumJanuary 6, 2020
open-xchange appsuiteOX App Suite through 7.10.2 has XSS.CVE-2019-167176.1 MediumJanuary 6, 2020
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3...CVE-2013-62426.1 MediumJanuary 2, 2020
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x...CVE-2013-74866.1 MediumJanuary 2, 2020
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x...CVE-2013-74856.1 MediumJanuary 2, 2020
open-xchange appsuiteOX App Suite 7.10.1 and 7.10.2 allows SSRF.CVE-2019-142255.4 MediumOctober 14, 2019
open-xchange appsuiteOX App Suite through 7.10.2 has Insecure Permissions.CVE-2019-142268.1 HighOctober 14, 2019
open-xchange appsuiteOX App Suite 7.10.1 and 7.10.2 allows XSS.CVE-2019-142276.1 MediumOctober 14, 2019
open-xchange appsuiteOX App Suite 7.10.1 and earlier has Insecure Permissions.CVE-2019-118063.3 LowAugust 20, 2019
open-xchange appsuiteOX App Suite 7.10.0 to 7.10.2 allows XSS.CVE-2019-115225.4 MediumAugust 20, 2019
open-xchange appsuiteOX App Suite 7.10.1 allows Content Spoofing.CVE-2019-115218.1 HighAugust 20, 2019
open-xchange appsuiteOX App Suite 7.10.1 and earlier allows Information Exposure.CVE-2019-71597.5 HighJune 18, 2019
open-xchange appsuiteOX App Suite 7.10.0 and earlier has Incorrect Access Control.CVE-2019-71589.8 CriticalJune 17, 2019
open-xchange appsuiteOX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.CVE-2017-136679.9 CriticalMay 23, 2019
open-xchange appsuiteOX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).CVE-2017-136685.4 MediumMay 23, 2019
open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.CVE-2017-150294.3 MediumMay 23, 2019
open-xchange appsuiteOpen-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).CVE-2017-150306.1 MediumMay 23, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open