OA
Product
Open-xchange Appsuite Backend
by Open-xchange · last CVE Aug 2, 2023
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 9Low 2
Watch

Add Open-xchange Appsuite Backend to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-26436
8.8
1%
Jun 20
Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not properly checked during deserialization
Affected: before 7.10.6; 7.10.6; 7.10.6
CVE-2023-26451
7.5
1%
Aug 2
Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization Service
Affected: through 8.11.0
Showing 2