Unscored severity · published Sep 5, 2013
CVE-2013-5698
Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite and Server before 6.22.0 rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0 before rev8 allows remote authenticated users to inject arbitrary web script or HTML via a delivery=view action, aka Bug ID 26373, a different vulnerability than CVE-2013-3106.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OA
Open-xchange Appsuite · Open-xchange
6.22.0; 6.22.1; 7.0.1; 7.0.2; 7.2.0 · source: NVD
OS
Open-xchange Server · Open-xchange
6.22.0; 6.22.1; 7.0.1; 7.0.2; 7.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5698
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5698
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-06/0012.html
More from Open-xchange Appsuite
9.9
CVE-2017-13667
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF
9.8
CVE-2020-12645
OX App Suite 7.10.1 to 7.10.3 has improper input validation for rate limits with a crafted User-Agent header, spoofed vacation notices, and /apps/load memory consumption
9.8
CVE-2019-7158
OX App Suite 7.10.0 and earlier has Incorrect Access Control
9.8
CVE-2017-5212
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control
9.8
CVE-2017-5210
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure