Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Open-xchange

Open-xchange vulnerabilities

Products

Appsuite157
Ox App Suite48
Dovecot16
Appsuite Backend14
Server13
Ox Guard11
Appsuite Frontend8
Appsuite Office4
Pdns4
App Suite3
Documents3
Open-xchange2

Newest

Known exploitedIn KEVPublic exploitFix available

open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail...CVE-2021-442115.4 MediumMarch 28, 2022
open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data.CVE-2021-442106.1 MediumMarch 28, 2022
open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO.CVE-2021-442096.1 MediumMarch 28, 2022
open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via an unknown system message in Chat.CVE-2021-442086.1 MediumMarch 28, 2022
open-xchange ox app suiteOX App Suite 7.10.5 allows Information Exposure because a caching mechanism can caused a Modified...CVE-2021-383784.3 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within...CVE-2021-383776.1 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via...CVE-2021-383765.3 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via the alt attribute of an IMG element in a truncated e...CVE-2021-383756.1 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite through through 7.10.5 allows XSS via a crafted snippet that has an app loader...CVE-2021-383745.4 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite 7.10.5 allows XSS via an OX Chat system message.CVE-2021-334956.1 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering.CVE-2021-334946.1 MediumNovember 22, 2021
open-xchange ox app suiteThe middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in...CVE-2021-334936.0 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite 7.10.5 allows XSS via an OX Chat room name.CVE-2021-334926.1 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive,...CVE-2021-334916.5 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature.CVE-2021-334906.1 MediumNovember 22, 2021
open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file.CVE-2021-334896.1 MediumNovember 22, 2021
open-xchange ox app suitechat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX...CVE-2021-334886.1 MediumNovember 22, 2021
open-xchange documentsOX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML...CVE-2021-280954.8 MediumJuly 27, 2021
open-xchange documentsOX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash...CVE-2021-280936.5 MediumJuly 27, 2021
open-xchange documentsOX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash...CVE-2021-280946.5 MediumJuly 27, 2021
open-xchange appsuiteOX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG...CVE-2021-266995.4 MediumJuly 22, 2021
open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet ...CVE-2021-374036.1 MediumJuly 22, 2021
open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via binary data that...CVE-2021-374026.1 MediumJuly 22, 2021
open-xchange appsuiteOX App Suite before 7.10.3-rev32 and 7.10.4 before 7.10.4-rev18 allows XSS via a code snippet ...CVE-2021-266986.1 MediumJuly 22, 2021
open-xchange appsuiteOX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature,...CVE-2020-289456.1 MediumMay 3, 2021
open-xchange appsuiteOX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position...CVE-2021-319346.1 MediumApril 30, 2021
open-xchange appsuiteOX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common...CVE-2021-319356.1 MediumApril 30, 2021
open-xchange ox guardOX Guard 2.10.4 and earlier allows a Denial of Service via a WKS server that responds slowly or...CVE-2020-289447.5 HighApril 30, 2021
open-xchange appsuiteOX App Suite 7.10.4 and earlier allows SSRF via a snippet.CVE-2020-289436.5 MediumApril 30, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth...CVE-2021-239276.4 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string.CVE-2021-239286.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded...CVE-2021-239296.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile.CVE-2021-239306.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via an inline binary file.CVE-2021-239316.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename.CVE-2021-239326.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL.CVE-2021-239336.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code.CVE-2021-239346.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via an appointment in which the location contains...CVE-2021-239356.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via the subject of a task.CVE-2021-239366.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_INFO to the ...CVE-2020-247016.1 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names...CVE-2020-247005.4 MediumJanuary 12, 2021
open-xchange appsuiteOX App Suite through 7.10.3 allows stats/diagnostic?param= XSS.CVE-2020-150044.8 MediumOctober 23, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address...CVE-2020-150034.3 MediumOctober 23, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API.CVE-2020-15002Public exploit5.0 MediumOctober 23, 2020
open-xchange appsuiteOX App Suite 7.10.3 and earlier allows XSS via text/x-javascript, text/rdf, or a PDF document.CVE-2020-126465.4 MediumAugust 31, 2020
open-xchange appsuiteOX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User...CVE-2020-126459.8 CriticalAugust 31, 2020
open-xchange appsuiteOX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list...CVE-2020-126445.0 MediumAugust 31, 2020
open-xchange appsuiteOX App Suite 7.10.3 and earlier has Incorrect Access Control via an /api/subscriptions request...CVE-2020-126434.3 MediumAugust 31, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows SSRF.CVE-2020-85446.5 MediumJune 16, 2020
open-xchange appsuiteOX App Suite through 7.10.3 allows XXE attacks.CVE-2020-85416.5 MediumJune 16, 2020
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open