Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Open-xchange

Open-xchange vulnerabilities

Products

Appsuite157
Ox App Suite48
Dovecot16
Appsuite Backend14
Server13
Ox Guard11
Appsuite Frontend8
Appsuite Office4
Pdns4
App Suite3
Documents3
Open-xchange2

Newest

Known exploitedIn KEVPublic exploitFix available

open-xchange appsuiteThe backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39,...CVE-2018-5756Public exploit4.3 MediumJune 15, 2018
open-xchange appsuiteAbsolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite...CVE-2018-5755Public exploit5.5 MediumJune 15, 2018
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite...CVE-2018-5754Public exploit5.4 MediumJune 15, 2018
open-xchange appsuiteThe frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31,...CVE-2018-5753Public exploit6.5 MediumJune 15, 2018
open-xchange appsuiteThe backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39,...CVE-2018-5752Public exploit8.8 HighJune 15, 2018
open-xchange appsuiteThe backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39,...CVE-2018-5751Public exploit6.5 MediumJune 15, 2018
open-xchange appsuiteThe backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38,...CVE-2017-17062Public exploit6.5 MediumJune 15, 2018
open-xchange appsuiteThe backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to...CVE-2014-20785.3 MediumApril 10, 2018
open-xchange appsuite, server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite...CVE-2015-15886.1 MediumJune 8, 2017
open-xchange documentconverter-api, office web, appsuite backend +1 more +3 moreCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59...CVE-2016-68466.1 MediumMarch 29, 2017
powerdns recursor, debian linux, pdns +1 more +3 moreAn issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4,...CVE-2016-7074Fix available5.3 MediumJanuary 13, 2017
powerdns recursor, debian linux, pdns +1 more +3 moreAn issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4,...CVE-2016-7073Fix available5.3 MediumJanuary 13, 2017
powerdns authoritative, debian linux, pdns +2 moreAn issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a...CVE-2016-7072Fix available5.3 MediumJanuary 13, 2017
powerdns recursor, debian linux, pdns +1 more +3 moreAn issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4...CVE-2016-7068Fix available5.3 MediumJanuary 13, 2017
open-xchange ox guardAn issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got...CVE-2016-6854Public exploit6.1 MediumDecember 15, 2016
open-xchange ox guardAn issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to...CVE-2016-6853Public exploit6.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local...CVE-2016-68524.3 MediumDecember 15, 2016
open-xchange ox guardAn issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided...CVE-2016-6851Public exploit6.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as...CVE-2016-68506.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. API requests can be used...CVE-2016-68485.5 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as...CVE-2016-68476.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within...CVE-2016-68456.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG...CVE-2016-68446.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code can be...CVE-2016-68436.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Setting the user's name...CVE-2016-68426.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be...CVE-2016-5740Public exploit6.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. Adding images from...CVE-2016-51246.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Custom messages can be...CVE-2016-40484.3 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external...CVE-2016-40474.3 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure...CVE-2016-40465.8 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be...CVE-2016-40456.1 MediumDecember 15, 2016
open-xchange ox guardAn issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an...CVE-2016-40287.5 HighDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend...CVE-2016-40273.5 LowDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer...CVE-2016-40266.1 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet...CVE-2016-31747.4 HighDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter...CVE-2016-31735.4 MediumDecember 15, 2016
open-xchange appsuiteAn issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26. The "session"...CVE-2016-28406.1 MediumDecember 15, 2016
open-xchange ox guardAn issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is...CVE-2015-85428.8 HighDecember 15, 2016
open-xchange ox guardCross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows...CVE-2015-73854.3 MediumNovember 19, 2015
open-xchange server, appsuite +1 moreCross-site scripting (XSS) vulnerability in unspecified dialogs for printing content in the Front...CVE-2015-53754.3 MediumSeptember 28, 2015
open-xchange appsuiteOpen-Xchange (OX) AppSuite and Server before 7.4.2-rev42, 7.6.0 before 7.6.0-rev36, and 7.6.1...CVE-2014-94664.0 MediumFebruary 17, 2015
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4...CVE-2014-89934.3 MediumJanuary 7, 2015
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31, 7.4.0...CVE-2014-16794.3 MediumJanuary 5, 2015
open-xchange appsuiteThe Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4...CVE-2013-62414.0 MediumDecember 27, 2014
open-xchange app suiteServer-side request forgery (SSRF) vulnerability in the documentconverter component in Open...CVE-2014-52374.3 MediumDecember 1, 2014
open-xchange appsuiteSQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6...CVE-2014-78716.5 MediumNovember 21, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite before 7.4...CVE-2014-52354.3 MediumSeptember 17, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite before 7.4...CVE-2014-52344.3 MediumSeptember 17, 2014
open-xchange appsuiteCross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 before 7.4.1-rev11 and 7...CVE-2014-23934.3 MediumApril 17, 2014
open-xchange appsuiteThe E-Mail autoconfiguration feature in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7...CVE-2014-23924.3 MediumApril 17, 2014
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open