Skip to contentOpen-xchange Appsuite Frontend vulnerabilities
- mozilla firefox, firefox esr, thunderbird +5 more +7 morePDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDFCVE-2024-4367Public exploitFix availableEPSS 70.7%8.8 High
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe "OX Count" web service did not specify a media-type when processing responses by external...CVE-2023-264505.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe "OX Chat" web service did not specify a media-type when processing responses by external...CVE-2023-264495.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreCustom log-in and log-out locations are used-defined as jslob but were not checked to contain...CVE-2023-264485.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe "upsell" widget for the portal allows to specify a product description. This description...CVE-2023-264475.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreThe users clientID at "application passwords" was not sanitized or escaped before being added to...CVE-2023-264465.4 Medium
- open-xchange appsuite frontend, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreFrontend themes are defined by user-controllable jslob settings and could point to a malicious...CVE-2023-264455.4 Medium
- open-xchange documentconverter-api, office web, appsuite backend +1 more +3 moreCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59...CVE-2016-68466.1 Medium