Skip to content

Open-xchange vulnerabilities

Products

Newest

open-xchange appsuiteThe password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1...CVE-2014-23914.3 MediumApril 17, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 7.4.1...CVE-2014-20774.3 MediumMarch 20, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote...CVE-2013-71434.3 MediumJanuary 26, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows...CVE-2013-71424.3 MediumJanuary 26, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows...CVE-2013-71414.3 MediumJanuary 26, 2014
open-xchange appsuiteXML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4...CVE-2013-71404.0 MediumJanuary 26, 2014
open-xchange appsuiteMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange (OX) AppSuite 7.4.0 and...CVE-2013-69974.3 MediumJanuary 9, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25...CVE-2013-60744.3 MediumNovember 19, 2013
open-xchange appsuiteCRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain...CVE-2013-60094.3 MediumOctober 3, 2013
open-xchange appsuiteMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite before 7.2.2 allow...CVE-2013-56903.5 LowOctober 3, 2013
open-xchange appsuiteThe Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2...CVE-2013-59364.3 MediumSeptember 25, 2013
open-xchange appsuiteThe Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2...CVE-2013-59354.3 MediumSeptember 25, 2013
open-xchange appsuiteOpen-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded...CVE-2013-59344.0 MediumSeptember 25, 2013
open-xchange appsuiteThe (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7...CVE-2013-52007.5 HighSeptember 25, 2013
open-xchange appsuite, server +1 moreCross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16,...CVE-2013-56983.5 LowSeptember 5, 2013
htmlcleaner project htmlcleaner, open-xchange appsuite +1 moreMultiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before...CVE-2013-50354.9 MediumSeptember 5, 2013
open-xchange appsuiteOpen-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2...CVE-2013-47903.5 LowSeptember 5, 2013
open-xchange appsuite, server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6...CVE-2013-31064.3 MediumSeptember 5, 2013
open-xchange appsuite, server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6...CVE-2013-25834.3 MediumSeptember 5, 2013
open-xchange appsuite, server +1 moreCRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6...CVE-2013-25825.0 MediumSeptember 5, 2013
open-xchange serverOXUpdater in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before...CVE-2013-1651Public exploit5.8 MediumSeptember 5, 2013
open-xchange serverOpen-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses weak...CVE-2013-1650Public exploit2.1 LowSeptember 5, 2013
open-xchange serverOpen-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 uses the...CVE-2013-1649Public exploit4.3 MediumSeptember 5, 2013
open-xchange serverThe Subscriptions feature in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6...CVE-2013-1648Public exploit3.5 LowSeptember 5, 2013
open-xchange serverMultiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before...CVE-2013-1647Public exploit5.0 MediumSeptember 5, 2013
open-xchange serverMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6...CVE-2013-1646Public exploit4.3 MediumSeptember 5, 2013
open-xchange serverDirectory traversal vulnerability in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13...CVE-2013-1645Public exploit4.0 MediumSeptember 5, 2013
open-xchangeThe open source version of Open-Xchange 0.8.2 and earlier uses a static default username and...CVE-2006-27387.5 HighJune 1, 2006
open-xchangeCross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with ...CVE-2006-00914.3 MediumJanuary 5, 2006