OA
Product
Open-xchange Appsuite Frontend
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 7Low 0
Watch
Add Open-xchange Appsuite Frontend to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4367 | 8.8 | May 14 | A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context Affected: before 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; 7.10.6; +34 more |
| CVE-2016-6846 | 6.1 | Mar 29 | Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59, 7.8.0 before 7.8.0-rev38, 7.8.2 before 7.8.2-rev8; AppSuite frontend before… Affected: 7.6.2; 7.8.0; 7.8.2 |
| CVE-2023-26450 | 5.4 | Aug 2 | The "OX Count" web service did not specify a media-type when processing responses by external resources Affected: through 7.10.6 |
| CVE-2023-26449 | 5.4 | Aug 2 | The "OX Chat" web service did not specify a media-type when processing responses by external resources Affected: through 7.10.6 |
| CVE-2023-26448 | 5.4 | Aug 2 | Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers Affected: through 7.10.6 |
| CVE-2023-26447 | 5.4 | Aug 2 | The "upsell" widget for the portal allows to specify a product description Affected: through 7.10.6 |
| CVE-2023-26446 | 5.4 | Aug 2 | The users clientID at "application passwords" was not sanitized or escaped before being added to DOM Affected: through 7.10.6; 8.10 before 8.12 |
| CVE-2023-26445 | 5.4 | Aug 2 | Frontend themes are defined by user-controllable jslob settings and could point to a malicious resource which gets processed during login Affected: through 7.10.6 |
Showing 8